Securing AI Agents and MCP at the network layer with Tailscale and Highflame

I'm curious about the performance tax of deep packet inspection on these calls. Is this an eBPF implementation or a local proxy? Moving "guardrails" from code to infra feels like the right architectural shift, provided the latency doesn't kill the agent's UX.