TunSafe WireGuard Client for OS X

I&#x27;ve seen WireGuard recommended here pretty strongly, so I started looking into it, but I couldn&#x27;t see exactly how it could replace OpenVPN for us.<p>We have an OpenVPN bastion for access into our VPC, and each engineer has their own key. When someone leaves, we can revoke their key.<p>But WireGuard seems to use a single key per network interface. Would we just create an interface for every engineer (I have no idea what the limits are on these - maybe they&#x27;re cheap)? Or is this just not a good use case for WireGuard?

Here is some discussion about tunsafe.<p><a href="https:&#x2F;&#x2F;lists.zx2c4.com&#x2F;pipermail&#x2F;wireguard&#x2F;2018-March&#x2F;002448.html" rel="nofollow">https:&#x2F;&#x2F;lists.zx2c4.com&#x2F;pipermail&#x2F;wireguard&#x2F;2018-March&#x2F;00244...</a>

Previous HN discussion on TunSafe from earlier this week: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=16515637" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=16515637</a>

Is it possible with wireguard to provide public IPv6 address for clients? My server has &#x2F;64 subnet assigned, and clients have only IPv4, but I&#x27;d like to provide white IPv6 address for clients.

Is there by any chance a speed comparison against IPSec (IKEv2) i.e. strongSwan with AES-NI?<p>I haven’t used OpenVPN in many years, so such a comparison would be much more interesting.