There's a user space network stack in gvisor, written in Go. And it's already included in wireguard-go. See also https://fly.io/blog/ssh-and-user-mode-ip-wireg

There's a user space network stack in gvisor, written in Go. And it's already included in wireguard-go. See also https://fly.io/blog/ssh-and-user-mode-ip-wireguard/ https://fly.io/blog/ssh-and-user-mode-ip-wireguard/ which has already done this for SSH through wireguard-go