The design is possibly the simplest for what it does (and it does that exceedingly well).<p>sshuttle is:<p>- a tcp multiplexer (multiple connections onto one stream)<p>- a router (uses firewall rules to make normal connections go through the multiplexer)<p>- a few kludgy tunneling operations, to make the combination above seem like a real VPN (discovery of remote subnets, tunneling of DNS requests, ....)<p>- a default setup that runs the multiplexed stream through an ssh connection, thereby giving all the security guarantees that ssh provides (integrity, confidentiality, mitm resistance)<p>- packaged in such a way that the remote side needs to have a minimal python&gt;2.6 install, and a user capable of making tcp connections. Nothing more.<p>In my experience, it works way better than IPSEC tunnels and some commercial VPNs that I&#x27;ve used. With two caveats that I&#x27;m ok with with: a) only TCP, and b) all connections seem to come from your remote ssh server. No VPN solution that I&#x27;m aware of makes so few demands; do you know of one that doesn&#x27;t require root at the remote server?