=== 이 curl 은 어디서 어디로 가나 ===
100.83.212.4    app1.hyeonworks.com
100.83.212.4    auth.hyeonworks.com

=== 호스트의 DNAT 파일 (sudo 없이 읽히나) ===
#!/usr/sbin/nft -f
table ip lab_edge
delete table ip lab_edge

table ip lab_edge {
	chain prerouting {
		type nat hook prerouting priority dstnat; policy accept;
		iifname "tailscale0" tcp dport {80, 443} dnat to 192.168.122.10
	}

	chain forward {
		type filter hook forward priority filter - 10; policy accept;
		ip daddr 192.168.122.10 tcp dport {80, 443} ct state new accept
	}
}

=== lab_edge 테이블 실물 ===
sudo: a password is required
exit=1