DERP is available on TCP 8443. Add the custom DERP map to your tailnet policy.