WG-crypto + routing appliance tuning: powerManagement.cpuFreqGovernor=performance
(pin cores -> consistent WG throughput + lower forwarding jitter); load tcp_bbr +
net.ipv4.tcp_congestion_control=bbr + net.core.default_qdisc=fq; rmem/wmem_max 64M
+ tcp_rmem/tcp_wmem 64M autotune ceiling + netdev_max_backlog 16384 for high-RTT
abroad BDP. Helps xlab-originated TCP; forwarded transit keeps endpoints' own CC.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>