L4: /nw/proxy/

WireGuard - C

https://www.wireguard.com/quickstart/
https://wiki.archlinux.org/title/WireGuard
Userspace: https://github.com/masipcat/wireguard-go-docker

tailscale

Free for Personal: https://tailscale.com/pricing/

curl -fsSL https://tailscale.com/install.sh | sh
sysctl -w net.ipv4.ip_forward=1
sysctl -w net.ipv6.conf.all.forwarding=1
tailscale up --advertise-exit-node # enable on WebUI: Edit route settings
tailscale status

Official: https://login.tailscale.com/admin/machines
Custom: https://tailscale.com/kb/1118/custom-derp-servers/

zerotier

curl -s https://install.zerotier.com | sudo bash
service zerotier-one status
zerotier-cli status

nebula - go

https://github.com/slackhq/nebula