Is this a support request?

• This is not a support request

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

root@VM-4-4-debian:~# headscale nodes list
ID | Hostname | Name | MachineKey | NodeKey | User | IP addresses | Ephemeral | Last seen | Expiration | Connected | Expired
1 | vm-4-4 | h200 | [GKJ] | [SgwZo] | a | 100.64.0.1, fd7a:115c:a1e0::1 | false | 2026年01月26日 01:57:13 | N/A | online | no
2 | vm-0-11 | h30 | [X2K] | [I/ER+] | a| 100.64.0.2, fd7a:115c:a1e0::2 | false | 2026年01月26日 02:08:30 | N/A | online | no
3 | tails | new | [KPE] | [Z3c18] | a | 100.64.0.3, fd7a:115c:a1e0::3 | false | 2026年01月25日 20:40:22 | N/A | online | no
4 | vm-0-4 | 30 | [mvq] | [1bRGm] | a | 100.64.0.4, fd7a:115c:a1e0::4 | false | 2026年01月25日 23:58:54 | N/A | online | no
5 | vm-4-3 | 200 | [4K2] | [pO9E0] | a | 100.64.0.5, fd7a:115c:a1e0::5 | false | 2026年01月25日 10:42:45 | N/A | online | no
6 | tegra | tegra | [nbh] | [hDJ10] | a | 100.64.0.6, fd7a:115c:a1e0::6 | false | 2026年01月26日 02:18:31 | N/A | online | no

root@VM-4-4-debian:~# headscale nodes list-routes
ID | Hostname | Approved | Available | Serving (Primary)
1 | h200 | 10.0.4.4/32 | 10.0.4.4/32 | 10.0.4.4/32
2 | h30 | 10.0.0.11/32 | 10.0.0.11/32 | 10.0.0.11/32
3 | new | 192.168.39.0/24 | 192.168.39.0/24 | 192.168.39.0/24
4 | 30 | 10.0.0.4/32 | 10.0.0.4/32 | 10.0.0.4/32
5 | 200 | 10.0.4.3/32 | 10.0.4.3/32 | 10.0.4.3/32
6 | tegra | 192.168.31.0/24 | 192.168.31.0/24 | 192.168.31.0/24

Expected Behavior

root@VM-4-4-debian:(削除) # tailscale ping 100.64.0.1
100.64.0.1 is local Tailscale IP
root@VM-4-4-debian: (削除ここまで)# tailscale ping 100.64.0.2
ping "100.64.0.2" timed out
ping "100.64.0.2" timed out
^C
root@VM-4-4-debian:~# headscale version
headscale version v0.28.0-beta.1
commit: 7be2091
build time: 2025年12月18日T11:42:32Z
built with: go1.25.1 linux/amd64

Steps To Reproduce

ping "100.64.0.2" timed out

Environment

- OS:
- Headscale version:headscale version v0.28.0-beta.1
- Tailscale version:1.92.5

Runtime environment

• Headscale is behind a (reverse) proxy
• Headscale runs in a container

Debug information

Deployment environment: China. After deployment, it works normally, but after some time, it becomes unreachable (ping time out).