[rebase]

Check out wireguard: https://www.wireguard.io/

[api]

Wireguard supports roaming but it's not distributed in a p2p global sense.

[rebase]

True. tinc: https://www.tinc-vpn.org/ is another option for distributed VPN

But if you're ok with discovery going through master/server and then connecting directly to peers for traffic, I'd stick with Wireguard.