The only "hard" thing is that wireguard doesn't port forward automatically, you have to add an iptables rule. Took me 10 minutes to figure out how and now whenever I add a service I simply copypaste previous rules and add relevant ports...
Edit: plus once you set it up you also get to use it as a VPN for your devices.
The main reason to use something other than WireGuard today is that it requires root to run, in order to change the network configuration, so you can't use it to tunnel out on machines where you don't have elevated privileges.
Now I imagined wireguard would be perfect for this, but alas its only UDP which will never work on this network, sadly.
Also my cell proider somehow makes wireguard impossible, not sure if they block UDP too.
I was also sad when zerotier wouldn't work through the proxies.
I know, I know, busting proxies is wrong. But for me using it between linux boxes on permanent connections works fine, but its a very small portion of what I want from my VPN.
In the end it turns out Home Assistant on a dyndns HTTPs site solves most of my access problems. Even ssh can be solved using it!
Get "http://localhost:36169/": dial tcp 127.0.0.1:36169: connect: connection refusedI didn't see it on your list. It isn't clearnet again, but so are others, such as Zeronet :)