Heh... we went spelunking into Apple's open source for a not too different reason a few years ago!

https://www.zerotier.com/blog/how-zerotier-eliminated-kernel...

https://apple.stackexchange.com/questions/337715/fake-ethern...

We did this to eliminate the need for kernel extensions to create L2 interfaces.