@sir small add on, there is a go implementation of #wireguard around and therefore it is working well on android, openbsd, freebsd and AFAIR even Mac and Windows (windows client is still beta)