Really it is wire guard on both client and server with an overlay of some pretty simple management scripts that communicate with other clients and servers over relay