Private DERP endpoint uses TLS port 8443.