This works really well. It would be interesting to see if someone implements something similar, but independent of Tailscale. (and completely open source)

There are other implementations, such as AWS's Session Manager and Teleport, that implement SSH and allow authentication using IAM and Teleport.

The added features, like SSH session recordings, are great to have.