WireGuard is my choice which is in ClearLinux KVM inside my HomeLab server due to this fast, modern and secure VPN tunnel.