I’m guessing you use Tailscale for remote access?
Kernelspace wireguard. I found there were performance tradeoffs with tailscale because it's userspace.