I had to look it up:
https://en.m.wikipedia.org/wiki/Small_form-factor_pluggable_...
This SFP has an embedded ARM processor running Linux. It’s pretty meta, but one could imagine a wireguard control network for these. The article even describes using wireguard-go on the embedded side.