On: WireGuard: next generation in-kernel modern VPN

[zx2c4]

WireGuard is UDP only. For TCP or SSL tunneling, look at a million other things that already do this.

[cakoose → zx2c4]

(I don't know much about networking.)

What are the advantages of doing UDP instead of IP?

It seems like, all else being equal, doing IP has the advantage of working with UDP and TCP out of the box.

[beagle3 → cakoose]

It transfers general IP packets, but encapsulates them inside UDP packets.

[janvidar → cakoose]

UDP (and TCP) are built on top of IP. You can add other things on top of IP also, but they will be blocked by your average firewall.