We currently run a debian-maintained Linux 4.19 whereas the in-tree wireguard didn’t make it into the kernel until 5.6. We’re currently looking into upgrading to Linux 5.7 which is consideration to be released soon.

Still looking forward to the wireguard server and client support in the Linux kernel and being able to deploy it from the Pods. Being able to use the module may require additional privileges. While you are at it, can you also look into using the eBPF feature of the node’s kernel?

A tangential questions: Is there a specific reason to use Debian as your OS instead of Ubuntu (say, licensing or the ability to customize..)