Wireguard tunneling in user space with Netstack's virtualized TCP/IP stack