Wireguard should alleviate exactly that. It's designed to not use persistent connections, keepalives may have to be enabled in case of nat traversals though (t

Wireguard should alleviate exactly that. It's designed to not use persistent connections, keepalives may have to be enabled in case of nat traversals though (to enable incoming packets). https://www.wireguard.com/quickstart/ https://www.wireguard.com/quickstart/