After years of wrestling with IPsec and StrongSwan on embedded gateways, WireGuard feels like the VPN that was designed for constrained devices. Here is why.
How a single shell script making hundreds of iptables calls became a C++ application using iptables-restore, and why the rewrite was about more than just performance.