=== tailscale 이 만든 체인 ===
# Warning: table ip filter is managed by iptables-nft, do not touch!
# Warning: table ip nat is managed by iptables-nft, do not touch!
# Warning: table ip6 filter is managed by iptables-nft, do not touch!
# Warning: table ip6 nat is managed by iptables-nft, do not touch!
# Warning: table ip mangle is managed by iptables-nft, do not touch!
# Warning: table ip6 mangle is managed by iptables-nft, do not touch!
2:	chain ts-input {
4:		iifname "tailscale0" counter packets 1168848 bytes 1390274528 accept
6:		ip saddr 100.115.92.0/23 iifname != "tailscale0" counter packets 0 bytes 0 return
7:		ip saddr 100.64.0.0/10 iifname != "tailscale0" counter packets 530 bytes 29680 drop
10:	chain ts-forward {
11:		iifname "tailscale0" counter packets 360 bytes 33127 xt target "MARK"
13:		ip saddr 100.64.0.0/10 oifname "tailscale0" counter packets 0 bytes 0 drop
14:		oifname "tailscale0" counter packets 265 bytes 95483 accept
19:		counter packets 3492404 bytes 4065830972 jump ts-input
24:		counter packets 590543 bytes 5494319628 jump ts-forward
28:	chain ts-postrouting {
34:		counter packets 332016 bytes 24132162 jump ts-postrouting
38:	chain ts-input {
40:		iifname "tailscale0" counter packets 1 bytes 104 accept
44:	chain ts-forward {
45:		iifname "tailscale0" counter packets 0 bytes 0 xt target "MARK"
47:		oifname "tailscale0" counter packets 0 bytes 0 accept
52:		counter packets 435 bytes 159766 jump ts-input
57:		counter packets 0 bytes 0 jump ts-forward
61:	chain ts-postrouting {
67:		counter packets 81 bytes 6580 jump ts-postrouting
152:		iifname "tailscale0" tcp dport { 80, 443 } dnat to 192.168.122.10

=== iptables-nft 쪽 nat POSTROUTING ===
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-N ts-postrouting
-A POSTROUTING -j ts-postrouting
-A ts-postrouting -m mark --mark 0x40000/0xff0000 -j MASQUERADE

=== tailscale 의 SNAT 설정 ===
	"AdvertiseTags": null,
	"AdvertiseRoutes": null,
	"AdvertiseServices": null,
	"NoSNAT": false,
		"Advertise": false
