I don't get a clear sense of whether DERP support is really coming along in major wireguard clients though.
But since there is already a lot of subterfuge/HTTPS tunneling going on in Streisand, this seemed like a potential addon functionality, where the DERP relay is simply to dump Sterisand connecting clients into the wireguard host onboard Streisand as a bridge/pipe.
So the Tailscale guys have an opensource encryped packet relay system to provide a TCP form of Wireguard, effectively using HTTPS tunneling.
https://github.com/StreisandEffect/streisand-discussions/issues/
https://tailscale.com/blog/how-tailscale-works/#encrypted-tcp-relays-derp
I don't get a clear sense of whether DERP support is really coming along in major wireguard clients though.
But since there is already a lot of subterfuge/HTTPS tunneling going on in Streisand, this seemed like a potential addon functionality, where the DERP relay is simply to dump Sterisand connecting clients into the wireguard host onboard Streisand as a bridge/pipe.