F38-TS: Yes
Rationale
Explicitly select independently administered DiffServ domains in the outer IP transport. Each domain can classify, police and shape the tunnel or relay-connection aggregate and assign its own forwarding treatment within compatible inter-domain agreements. Enforcement uses domain-controlled resources rather than requiring uniform tailnet policy to manage the entire transport path.
Assessment method
Primary Tailscale documentation and explicitly selected IP policy review
Source context
Tailscale grants and IETF transport policy architecture
Outstanding qualification
Optional underlay witness, separate from Tailscale grants and cryptographic peer admission. Outer aggregate classification requires no decryption or propagation of inner DSCP markings. It does not promise per-application treatment inside a tunnel, public DERP provisioning or global QoS.
Public sources
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round679.html