You probably also know of Netbird -- open-source zero-trust VPN.

Personally, I shall some day find the patience to code and test a poor man's zero-trust -- app/site knocking + firewall whitelist.