WireGuard

Modern, minimal VPN protocol — only 4,000 lines of code, formally verified, cryptographically sound. The successor to OpenVPN and IPsec, now built into the Linux kernel.