> The gap between people able to buy an appliance and people who know basic routing, DNAT and subnetting is really really big these days This is a major advant

> The gap between people able to buy an appliance and people who know basic routing, DNAT and subnetting is really really big these days This is a major advantage of the mesh VPN layer. If your bare metal hosts/guests hardware have internet access via plain old DHCP, they can connect to the mesh network which is where all the special networking happens at the direction of the controller. On the mesh, every node can have a persistent static IP and dns entry, simplifying the network topology for the layers above.