The connection of the host (no matter if its ESXI or Proxmox) with Tailscale is working fine, now, I want to set public only a specific VM, tailscale can be installed (centos in this case) without issues, netcheck suggests its online, nevertheless, the VM stays unavailable inside and outside of the Wireguard-Mesh which is the Tailscale network although the admin console says its online. Firewall is completely disabled for the VM, what could be the issue?
if your client behind the subnet router is linux , you need to run the --accept-routes.