GL.iNet Slate 7, Tailscale, and Split-Routing Around the Great Firewall
A full technical walkthrough of the router-level setup I run in China:
a GL.iNet Slate 7 running Tailscale as the default route to a Debian
VPS exit node, with policy-based routing sending CN traffic direct
and a DNS split that keeps Chinese and foreign services both fast.
Includes the three gotchas that took the longest to unstick: LAN
forwarding and MASQUERADE on `tailscale0`, PBR-vs-Tailscale
precedence, and the GL.iNet 0x8000 mark leak.