I've been using NFSv4 over wireguard for a few weeks. It works really well, with speeds over 80 MBps for residential FTTH. Configuring a mesh wireguard network

I've been using NFSv4 over wireguard for a few weeks. It works really well, with speeds over 80 MBps for residential FTTH. Configuring a mesh wireguard network can take some time, though it looks like that's being worked on on and off. The main issue is having to update every config file when a new host joins. On the flip side, having each party authenticate the other means it should be pretty robust. You can bind NFS to the wireguard interface, and restrict by IP. Wireguard checks public keys against "authorizedips" before forwarding packets, so that should be pretty secure. I added the IPs to `/etc/hosts` so that I could allow a wildcard, that works kind of like netmasks, in a way. However, it seems not to handle servers coming and going that gracefully. My other remaining gripe is that there is no mount option to override gid and uid, besides setting up a mapping file; I don't need that granularity. Now, another option could be 9p (over wireguard), I haven't tried it, but it could be more flexible than NFS.