tinc supports this since forever, FWIW, and is fully open / self-hosted, no ties to a central server at all (so one node going down does not take your whole network with it).