After reading first couple of paragraph of this paper, Wireguard (https://www.wireguard.com) comes to mind.
Then, they mentioned a research OS called Ethos (which seems to be defunct now).
Did they figure out a more mainstream implementation?
I found this[0] implementation that does not require replacing the entire OS with Ethos, but I haven't yet tried it and cannot vouch for it.