Comment by andreareina

Have you tried using the tailscale interface IPs (100.x.x.x)? I've been able to use VNC over those addresses.