TunSafe also runs on userspace: https://github.com/TunSafe/TunSafe

tptacek · on Feb 10, 2022

It looks like from the source code that TunSafe opens up a tunnel device, in which case it's doing TCP/IP in the kernel, not in userland.

mobilio · on Feb 10, 2022

It opens tun/tap device just to get/push packets from/to virtual interface. Using tuntap is very common for all VPNs like OpenVpn2.

There isn't kernel driver like in real WireGuard.