[spike] WireGuard VPN protocol research

[xbend]

Please analyze the documentation for WireGuard protocol and see what are the different ways a wireguard connection could be established.

We were introduced to peer to peer config, but that requires that each peer knows each-other public IPs. This will be difficult to overcome in Gateway usecase, as Gateways are behind NAT.

Please experiment with a local setup.

[xbend]

It is hard to estimate this task. We are setting 8 for a start, but it could take less/more.

[jkmar]

Summary of the findings so far:

• Only one of the peers need to know the others endpoint establish connection
• PeersistentKeepalive option can be used to negate address change effects