Wireguard is a lightweight VPN protocol, which can be self-hosted.