Wireguard should alleviate exactly that.

It's designed to not use persistent connections, keepalives may have to be enabled in case of nat traversals though (to enable incoming packets).

https://www.wireguard.com/quickstart/