Split tunnel wireguard or tailscale to watch jellyfin on my remote roku

Hello, I have been searching around a bunch to find the best way of doing this.

I have a truenas scale running jellyfin behind a UDM pro which has its own special very easy to use vpn that works great for remote watching jellyfin on android/ios because UI has apps to connect to the ui vpn.

Unfortunately UI does not have a vpn app for roku, and why should they…

On the remote location I have a pfsense router set up that the roku is connected to.

I know that I can set up wireguard or tailscale point to point between my UDM pro and my Pfsense router, and presumably use a split tunnel to avoid routing all the pfsense traffic through the UDM pro, but is this the easiest solution? The jellyfin container on truenas scale has options to connect through wireguard or tailscale but I am not sure if that is what I want.

Can you not configure a site to site vpn between the udm and the pfsense ?

Ended up putting Tailscale on the udm pro and the pfsense and using them both as subnet routers. Works great now!

whats the bottleneck like, is there any speed degradation or throughput issues as I get my full upload bandwidth with s2s?

I just did some tests with a 710mb file over 300Mbps WiFi connection:

tailscale smb download: 10MBps

google drive download: 17MBps

I suspect that downloading from google drive with a browser is always going to be faster than smb, I will test more when I set up NextCloud.