On Tue, Jun 04, 2019 at 02:31:38 +0000, J.Witvliet@mindef.nl wrote:
Also it lacks encapsulation; essential for punching restrictive firewalls.
That doesn't need to be built in to the encrytion tunnel and is probably best to use a seperate tunnel to make your traffic look like https, http, dns or whatever.