Wireguard has kernel support now. It was originally a botched implementation that almost made it into the kernel but it was rescued by Jason Donenfeld himself a

Wireguard has kernel support now. It was originally a botched implementation that almost made it into the kernel but it was rescued by Jason Donenfeld himself at the last minute. But in the end the rewrite was better for everyone. Ars has a good writeup: https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/ https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice... As far as I know it's been merged back into the mainline kernel now.