This sends a probe to the device named nas over the tailnet and reports whether the path is direct or relayed through a DERP server, plus the round-trip time. Unlike ordinary ping it tests the actual encrypted tunnel. A relayed result usually means NAT traversal failed on one side.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.