I did this last year by using wireguard VPN between all nodes. It worked quite good I would say.

It was for a proof of concept project, so I don’t know how it would perform in production but it was promising.