A tsnet application may want to handle all RX/TX IP packets that are not otherwise handled by tailscale, such as to pass all packets to/from a VM guest.