> By the point that you do this at scale with your whole fleet, you'd almost be better off just setting up the tunnels yourself. I suppose you are correct, if

> By the point that you do this at scale with your whole fleet, you'd almost be better off just setting up the tunnels yourself. I suppose you are correct, if you regularly have traffic between every pair of nodes in the network. But I suspect that most companies have a lot of laptops that only talk to some datacenter/office via the VPN plus Gmail/O365/whatever via HTTPS. Monitoring in that situation is very easy.