If we replaced the IPIP mesh with a collection of geographically
distributed VPN servers (OpenVPN?) which advertised routes for /24 (or
larger) subnets, and dual homed each subnet to two or more VPN servers we
would have pretty good redundancy and could end the distribution of IPIP
endpoints and just let the Internet route between subnets.
------------------------------
John D. Hays - K7VE
Kingston, WA
<http://k7ve.org/blog> <http://twitter.com/#!/john_hays>
<http://www.facebook.com/john.d.hays>