It's hard to see how you can focus on security _and_ implement something as a kernel module. A kernel module give it the highest amount of privileges it can ha

It's hard to see how you can focus on security _and_ implement something as a kernel module. A kernel module give it the highest amount of privileges it can have. Meanwhile, we all know of the "principle of least privilege". Not to mention any potential bugs can kill the entire system. While a kernel module may have some performance gains, I'm sceptical about the trade-offs here. And I definitely don't think "VPN" falls into what we usually think a kernel should be responsible for.