pub const MESH_SUBNET: &str = "100.64.0.0/10";
Tailscale/Headscale CGNAT subnet — all mesh peers have addresses in this range.