"SSH tunnels adds hassle to deploy and maintain." Agreed. That is why I love sshuttle: https://github.com/sshuttle/sshuttle https://github.com/sshuttle/sshut

"SSH tunnels adds hassle to deploy and maintain." Agreed. That is why I love sshuttle: https://github.com/sshuttle/sshuttle https://github.com/sshuttle/sshuttle Any host that is running plain old sshd is now a potential VPN endpoint. No config or settings (or even permission) necessary. Supports --dns.