If we replaced the IPIP mesh with a collection of geographically distributed VPN servers (OpenVPN?) which advertised routes for /24 (or larger) subnets, and dual homed each subnet to two or more VPN servers we would have pretty good redundancy and could end the distribution of IPIP endpoints and just let the Internet route between subnets.
------------------------------ John D. Hays - K7VE Kingston, WA http://k7ve.org/blog http://twitter.com/#!/john_hays http://www.facebook.com/john.d.hays