Why Not WireGuard
blog.ipfire.org