If you're up for a migration project on deluge/ovpn you can probably cut out quite a bit of overhead by moving to WireGuard and Mullvad, WireVPN, etc... I thought PIA donated a bunch to WireGuard dev, but it doesn't look like they support it in GA yet.
Thing I love about deluge and PIA is it’s all in a docker container. So I didn’t have to muck with any settings on the host machine. Works great. I didn’t see anything like that for wireguard sadly.
