WireGuard 4+

While the wireguard protocol does live up to its grand promises of being lightweight and fast, the abysmal lack of official documentation and especially troubleshooting suggestions makes it nearly impossible to fix your setup if it doesn't work on the first try. Unless you're skilled at networking or you have assistance from someone with a working installation, it's next to impossible to troubleshoot a nonfunctional installation. That said, it fulfills all promises made about the protocol if you do manage to get it working.

This works more or less flawlessly. The protocol itself is incredibly fast and efficient, and this implementation maintains that.

It is completely integrated with macOS's networking frameworks, so it can be managed in System Preferences like a normal VPN and run without keeping a separate application open. It seems to have almost no system overhead, either, and it is very easy to set up. It also properly stores credentials in Keychain Access, rather than trying to manage them itself.

There is one oddity, though: the configuration dialog consists of one text box that contains the config file, rather than a series of form fields like the iOS client. I don't think it is worse, necessarily, but it'd make more sense if the UI was consistent across both platforms.

Everything works well, the only issue I'm having is that I need to disconnect/reconnect the connection after my laptop wakes up from sleep. The entire process takes about 60 seconds. It's no big deal but would be nice if it worked perfectly. :)