You could wrap in a wireguard tunnel.