Well, Iroh is more P2P (direct connections) and less VPN (subnet routing).

If anyone really wants to use Tailscale (or I think Headscale should work too) at application layer, you can use tsnet [0]

--

  0: https://tailscale.com/docs/features/tsnet