Listen, don't overcomplicate this. For max speed on a Pi, stick with UDP protocol. It's faster and more lightweight than TCP. As for tun or tap, use tun - it's simpler, and you don't need bridging crap. Just get the config right with the right port, encryption level, and use the right cipher...