SSH and User-Mode IP WireGuard
I added some example code to the post, because, again, I kind of can't get over how easy this turns out to be. And if you follow the link into Jason's `wireguard-go` code, until you  hit gVisor itself, it's not much more complicated under the hood.Having complete control of TCP/IP in userland like this, with so little code, is so valuable I feel like there needs to be some special name for the technique.The whole thing is kind of a vindication for Go's standard library network interface, which I have always hated.