[gentoo-user] Gentoo centric VPN

[james]

So, I need to be able setup and tear down a 4-component network.
Sometimes all (4) systems will be in the same location, probably about
50% of the time.

My (3) personal systems are:
(1) gentoo laptop (Open RC if that matters)
(1) window-7 laptop
(1) Android Cell (galaxy note 9)

These (3) are with me most about 70% of the time, but
often they will be in different locations hundreds of miles apart.


(1) The  corporate windows workstation/server. (always stationary).
(4) Total, often just the the (3) systems on this transient net.


So, my research suggest that WireGuard might be best because most of
what I'm moving around is a wide variety of image types, as well as
video and 3D/4D files  and binaries for odd-ball embedded devices, of a
wide variety. Eventually the file movement will be mostly automated
(scripted). WireGuard purports to have the most bandwidth capabilities
and some of these file_sets will be in the  gigabyte range often.


I've found lots to read and noodle with, but I'm curious what  (gentoo)
folks would suggest. For starters it cannot use an outsourced VPN;
that's dictated by others. So a "home-spun VPN" is warranted.


From others ::
"But WireGuard being awesome is old news. The new news is that now
there�s an easy way to integrate it into Android ROMs and kernels. "



https://opensource.com/article/18/8/open-source-tools-vpn

https://www.wireguard.com/install/

https://github.com/max-moser/network-manager-wireguard

https://forum.xda-developers.com/android/development/wireguard-rom-integration-t3711635


Those are a few links I found, but I really want a gentoo centric
method. Others suggests, for custom ROMs, to anything to secure the
Android phone and get rid of the "crap apps" would be most welcome. If I
cannot get rid of them I'd like a systematic way to bury those pesky
Android apps that pedestrian use, down the tree somewhere. I guess what
I'm trying to say is once I get the (4) devices working, I'll be testing
a variety of way to setup Android or embedded gentoo on that Android
Galaxy-9 so I control the stack, it can deeply sniffed, either on the
internal device or on external ports, via Deep Packet Inspection codes
on the ports via other microprocessors running embedded gentoo.

Use Gentoo prefix?

An android experimental stack?

I have a second cell phone so I can do whatever I need to with the
Android Galaxy Note 9. Jtag or other low level hardware programmers are
of keen interest; mandatory. Perhaps Samsung or another vendor sells the
hardware programming equipment? 5G bandwidth is definitely front and
center, when and where it's available, but ignored for now or until
those phones are available.


Discussion, ideas and suggestions are most welcome.


curiously,
James