We'll implement a VPN gateway IPSec/IKEv2 because it's supported natively both by clients (linuxLinux/windowsWindows/macOS) and the server (OpenBSD), no extra software required.