> where you can basically just scope VPNs to a subprocess rather than having to use some system wide network filter with split tunneling or whatever. Wireguard has huge usability issues due to that.
You can run wireguard in userspace with something like wireproxy which connects to a wireguard peer and acts as a proxy for your subprocess.
You can run wireguard in userspace with something like wireproxy which connects to a wireguard peer and acts as a proxy for your subprocess.
[1] https://github.com/windtf/wireproxy