In-kernel tunnel with modern crypto, leaner than IPsec and OpenVPN; also on Windows, macOS, BSD, mobile