If dns resolved then it’s not blocked. You need to look at your network.

Bypass dns connect to the ip and port. What happens?

This won’t work, your wan ip isn’t dynamic, it’s on the ISP NAT network and your resulting ip to public services is shared across many customers. CG-NAT.

I don’t know where you work but don’t access your tailnet from a work device and ideally not their network.

Speaking to roku, you could buy a cheap raspberri pi and usb network port. One port to the network the other to roku. The pi can have a tailscale advertised network to the roku, and the roku probably needs nothing since everything is upstream including private tailscale 100.x.y.z networks which will be captured by your device in the middle raspberri pi.

I guess that’d cost like 40 ish dollars one time.

Right up there battling broadcom for worst.

My kind of guy.

If Microsoft named it, it’s temporary. Let’s check intune no wait endpoint manager, no wait, intune again. First I’ll just make sure my login works in azure ad, no wait entra, no wait it’ll be copilot by the end of the year. Not to be confused with copilot (office) copilot (github) or copilot (azure) or power platform no wait copilot?

Would this not be the Linux subsystem on window? LSW