Build a VPN Tunnel

Build a WireGuard-style VPN: TUN/TAP virtual interfaces, Noise protocol handshake, X25519 + ChaCha20-Poly1305 + BLAKE2s, key schedule with forward secrecy, NAT traversal, cryptographic routing, and the protocol behind Tailscale and modern remote-access infrastructure.