i was curious about this and did some digging around for an open source implementation. this is what i found: https://github.com/iselt/masque-vpn