SoftEther works over "regular" TLS at least, you can even reverse-proxy it.