WireGuard-based VPN with NAT traversal.