[asenchi]

Read through the post, it is explained there:

> The reason I started on this was to better interoperate with "site-to-site" vpns, in particular AWS Site-to-Site VPNs, and the Auto-Discovery VPN (ADVPN) stuff on fortinet fortigate appliances. Both of these negotiate IPsec tunnels that can carry any traffic at the IPsec level, but use BGP and routes to direct traffic into those tunnels.

[MobiusHorizons]

Ack, I read that part, but it still wasn’t clear that wireguard wouldn’t have been a good solution (likely due to ignorance of either use case)