starting off with wireguard

[Greg Troxel <gdt%lexort.com@localhost>]

I have been sort of following for a long time, and am now trying to
configure wg.

I find that "pseudo-device wg" is required in the kernel (no surprise!)
but am surprised by:

   - it's not available as a module in 10 or 11
   - it's not in GENERIC for amd64 in 10 or 11
   - it's not in GENERIC for evbarm anything in 10 or 11

Is this a clue that?

   - I'm confused.
   - wg is really not baked (the "EXPERIMENTAL" label) and people
     believe it is flaky or likely does not provide the confidentiality
     one expects.
   - wg is believed fine and many use it but for some good reason people
     think you should have to build a kernel.
   - wg is believed fine and nobody has gotten around to adding it.

In my case, I'm more looking for circumvention of clumsy/IT-trendy
censorship, where they let you connect to anything on 443 and block nerd
protocols (because proles accessing Facebook is wholesome, apparently).
So I'm not super concerned about confidentiality.

Related, it seems wg is UDP only, and assuming that's true, what ports
do people find is most likely to work in semi-censored environments?