Yes, I can confirm now. Wireguard + ssf[1] (UDP forwarding) works very well. I will proceed doing some benchmark to understand how much this solution is downgrading performance. [1] https://github.com/securesocketfunneling/ssf Cheers, Gianluca