sorry @pe1chl but we don't need workarounds. we need solution. "Simple" GRE/ipsec is not so simple. It tends to interfere with fasttrack (so you need additional raw rules), has reported issues with hardware offloading and in many cases is just incompatible with remote endpoint. Everything ...

Please do not go this way. I had nasty security accident (for my defense - I discovered in on first day of my job) with Unifi Controller itself. Remote management is always best way to introduce new security holes - unless of course you do that in a secirity oriented paranoic style.

So I just registered to put a +1 on VTI. I have very complex corporate network with all kind of devices being used as routers - from VyOS and OpnSense virtual appliances (mostly in cloud) to heavy duty hardware routers like Sophos, Cisco and Juniper devices. All of them do have VTI and we are using ...