>> If all of my remote access can be done via ssh {+ local/remote forwarding}.. > WireGuard .. has higher performance ... Note there are circumstances where s

>> If all of my remote access can be done via ssh {+ local/remote forwarding}.. > WireGuard .. has higher performance ... Note there are circumstances where ssh port forwarding (-L, -R, -D) is faster than any L2/L3 vpn because it breaks TCP connections in two segments, so any flaky retransmission causing issues are localized, RTTs are smaller, TCP ramp-up is faster, etc. On the other hand, ssh tun/tap forwarding will almost certainly be slower. If you are connecting over a flaky wifi/2g/3g connection, possibly to a flaky/distant counterpart, and have performance issues, I would recommend trying (L4 is it?) ssh/socks or even http forwarding via a stable middle host.