Comment by raggi

(tailscalar here): it's been a long day working on this, and we will have more details to follow. quickly though, on this point about enumeration, some of this may be a difference in headscale. the tailscale control plane performs what we colloquially refer to as "netmap trimming" - if node a has no acls that allow it to do anything with node b, then neither a or b would see each other in their netmap.