Solid si Tailscale kahit naka-CGNAT. Gumagana siya out-of-the-box gamit ang DERP relay servers nila (kung hindi kaya ng direct connection). Pero note:

Pros:
Walang port forwarding na kailangan — kahit CGNAT, Globe, Converge, PLDT prepaid, gagana
Free for up to 3 users / 100 devices
Madaling i-setup — install lang app sa device, login Google/Microsoft, naka-connect na
MagicDNS + Tailscale SSH — kung may NAS kayo (TrueNAS, Unraid, Synology), pwedeng i-access via tailscale IP lang
End-to-end encrypted (WireGuard-based)

Performance notes for FTP/NAS:
Kung nakaka-DERP relay (hindi direct connection), mabagal — mga 5-15 Mbps lang throughput
Kung direct connection via UDP hole-punching, kaya nito ang full upload speed ng internet niyo
Check mo sa Tailscale admin console kung direct or relay ang connection status

Para pabilisin:
Self-host ka ng Headscale (self-hosted Tailscale control server) — optional
Better alternative for file-heavy work: ZeroTier (pwedeng i-custom yung IP routing at may mas magandang direct connection rate). Or Netmaker / WireGuard + UDP hole punching
Kung files lang ang habol at di kailangan ng mesh VPN, mas simple ang Syncthing (direct P2P file sync, CGNAT-friendly)
Bottomline: For casual remote access/reading files — yes, solid si Tailscale. For heavy file transfers video editing/backups — baka need mo ng self-hosted WireGuard server sa VPS (DigitalOcean/CloudFlare Tunnel) as alternative.