WireGuard, Seen From Both Sides: The Same Ping as Ciphertext and Cleartext
Build a WireGuard tunnel between two containers, then capture the same ping twice — encrypted UDP on the real link, cleartext ICMP inside wg0 — to see exactly where a VPN's encryption applies.

