I didn't try any networking approach myself so I can't attest to the best. I was on a narrow search for any cheap ~reasonable solution I could recommend for Ni

I didn't try any networking approach myself so I can't attest to the best. I was on a narrow search for any cheap ~reasonable solution I could recommend for Nix to mitigate the performance hit at install or run time--while avoiding any security/config/functionality splash damage that might end up on the front page of HN some day :)