Stunnel

NFSv4 over stunnel, by yours truly.

https://www.linuxjournal.com/content/encrypting-nfsv4-stunne...

RFC-9289: Towards Remote Procedure Call Encryption

“Special mention goes to Charles Fisher, author of ‘Encrypting NFSv4 with Stunnel TLS’ [LJNL]. His article inspired the mechanism described in this document.”

https://www.rfc-editor.org/info/rfc9289

Wireguard is the best (I find its great performance an order of magnitude better than tunelling via ssh for example).

I know stunnel serves different purpose, but still why would you need it for your service if you can be in the vpn and speak plaintext?

Is there anything that isn't horribly outdated that still needs this?

Is what?