> on Linux WireGuard yields some 15-20% better performance (on both throughput and latency). Assuming you're comparing to IPsec (and AES-NI accelerated AES-GCM

> on Linux WireGuard yields some 15-20% better performance (on both throughput and latency). Assuming you're comparing to IPsec (and AES-NI accelerated AES-GCM on the P2s), and especially a routed IPsec (VTI) .vs the more normally found "policy-based" IPsec, then this isn't true, for at least 'throughput', and it's completely provable. I've not tested latency. Agreed with your statements on OpenVPN, and the advantages of setup for WireGuard .vs IPsec or OpenVPN.