I've seen someone rewrite a wireguard proxy in rust for performance without realizing that it's just a daemon that interacts with the kernel to setup routing... But hey, at least the key generation is faster!