all encryption in place, tunnel establishment, udp hole punching