xcjs

Thank you! That is exactly my point.

That’s not quite the same - that gives you the appearance of being a local device, which is enough to fool the restriction.

Their policy and technology enforcement is to charge for remote access, not relaying.

They charge for remote access whether it’s through their relay service or not, and you can’t opt out of fallback to their relay service.

The client is open source and can be administered using the open source Headscale server. I use it with Keycloak as an auth gateway.