Okay, if today is a day of morons, I must mention #systemd, #netplan, and maintainers of #nftables who specified network-pre.target for Wants and Before in nftables.service.

Just think: network-pre

They are happily unaware of tunnels created by netplan.

And netplan cannot create tun interfaces, LOL.

#ifupdown and #sysvinit worked like a charm but which VPS provider offer, say, #devuan ?

Modern developers drag us back to the stone age.