I think there are good points made here, but for the most part WireGuard is a massive upgrade compared to OpenVPN for most users, and I think it's set up really

I think there are good points made here, but for the most part WireGuard is a massive upgrade compared to OpenVPN for most users, and I think it's set up really well for that use case (especially in a setting where you have control of the endpoints). There are other things for other use cases, I'm looking at glorytun [0] right now as a start. I particularly want the multipath stuff. Right now, it has the ability to do AEGIS where AES extensions are available, and fall back to ChaCha20-Poly1305. I personally think libsodium should look at adding a ChaCha12, and maybe ChaCha8, mode; 20 rounds seems pretty excessive, all things considered, and it has a considerable performance cost. By the way, given that the hardware would probably have dramatically more throughput and less complexity, I do wonder why CPU vendors aren't looking at ChaCha acceleration. It's not strictly necessary for timing attack reasons, since ChaCha doesn't really have these problems in software, but it seems to be better in every way than AES, given equal effort. RE: the multipath functionality is interesting to me, because I want to set up in some locations where directional radio could degrade in one direction or another, or maybe only satellite is available sometimes. I think probably the mad/glorytun multipath stuff is not that smart yet, but it's a start. [0]: https://github.com/angt/glorytun https://github.com/angt/glorytun