[khimaros]

for the latter, Rethink can be configured to work with eg. a wireguard VPN because it has a built-in wireguard client.