Tailscale is a wonderful thing but I wish they had a better story for very large organizations than 'everyone lives in one tailnet and surely you can keep one global set of ACLs sorted out'. I regret to inform you etc etc, universities, departments thereof. I like the idea of a single tailnet, but the administration side of things would be a terrible mess.