I have limited budget but have mostly older gen Unifi gear and they have a built in feature they brand as Teleport that if I understand right uses Wireguard under the hood. Works great for my limited use cases.