Finally resolved an issue with Tailscale and DNS. Unbound on my VPS kept serving records too slowly from a distant (~200ms) upstream DNS server, Tailscale would return SERVFAIL then iOS/macOS would cache it for a long time.

I’m not sure how it’s fixed but simply swapping out Unbound with Blocky solved the problem.