wireguard is so dead simple i can't begin to reccommend enough to learn how to set it up

it uses much the same cryptography as nostr also, i think it uses faster ChaCha CSPRNG (rather than AES)