@Andres4NY @KathyReid This is why Ph.D is sometimes jokingly referred to as "the too-far-thing-taking". Yeah, I used to knock up tunnels to AWS over IPSEC with pfSense for a rather annoying fintech client. They ended up in Duo Security's old serviced office space (with a smelly, busy toilet) after Duo found somewhere proper in London E1. But overlays are overlays, and you always pay a tax. Part of the motivation behind segment routing is to get rid of that tax for much cruft. George Varghese FTW