I'm really thrilled with WireGuard. It's small, easy to audit, easy to setup, and it is using the Noise protocol which uses trusted cryptography primitives by DJB. I hope it can be merged into the mainline Linux kernel once it stabilizes.