I almost like the idea of firewall passthrough's instead of the trans tunnel.. need to do some more thinking on this