Bench wireguard (kernel not userland) against an ssh tunnel and you’ll know…