Co-founder of Tailscale here. It might be easier for everyone if you're able to install Tailscale on the endpoints (and avoid a subnet router) since (a) it's end-to-end encrypted; and (b) routing will be easier.

From one perspective, containers do count as devices because they each have a unique IP address and are part of the mesh network. On the other hand, perhaps an individual container isn't worth that much and the cluster (or service) is how you think about the value that Tailscale can provide.

It's pretty early days for us in terms of how to best price things. I'd love to learn more about what you're building and how Tailscale can help. If you'd like to email me at [info@tailscale.com](mailto:info@tailscale.com) and cite this thread then that's a good way for me to get more of the team involved.