That is sadly, the biggest worry about it. Once I collect a few round tuit's, I wanted to see if I could build up a tool to build up the same mesh + routing, p

That is sadly, the biggest worry about it. Once I collect a few round tuit's, I wanted to see if I could build up a tool to build up the same mesh + routing, perhaps confined to a linux namespace so as to keep it contained, and try to reproduce the ease of configuration, on top of much better maintained core linux tools. But the key has to be -- the configuration has to be just as simple as tinc to be effective. Like, almost just parse the configuration files and build it up with WG tunnels. https://github.com/m13253/VxWireguard-Generator https://github.com/m13253/VxWireguard-Generator <-- this is what I use with a more serious "internal business" use case, so I know wireguard is in the sensitive security/encryption loop. It uses wireguard tunnels to make a broadcast/mesh Layer2 network with vxlan connections, and you then run OSPF/babel/your-favorite-routing-protocol over that.