Tinc can work on L2, which means works like switch, means it can works like an cable between any nodes.It doesn't need an ip, you can make a bridge. There is no known good replacement for this.

The down side is

- single thread (perf has limits in 10gbe)

- userspace (wg can works in kernel)

- 1.1 is stable enough, but still may crash, be careful

You may also interested in n2n