netbird

tailscale

straight up wireguard??

long-lived ssh reverse proxy