This would work best for my use case: https://github.com/slackhq/nebula

But currently I also see other benefits in using TLS (FDB uses TLS certs to distinguish server-to-server communication, from clients)