As a quick followup, I like Kevin's plan. I think that'll be the least pain, most reliable version. I also wonder if https://github.com/apenwarr/sshuttle can help in this case. Igor