With tailscale, incoming traffic was coming in fine, but outgoing traffic would go out through the wrong IP, and so my relays fail.