On Tue, Jun 04, 2019 at 02:31:38 +0000,
J.Witvliet(a)mindef.nl wrote:
Also it lacks encapsulation; essential for punching restrictive
firewalls.
That doesn't need to be built in to the encrytion tunnel and is probably
best to use a seperate tunnel to make your traffic look like https, http,
dns or whatever.