Comment 1 for bug 425928

vtun has broken encryption support that makes it unsuitable for main (and for a secure multi-cluster support), see MIR review in bug 412059.

The workaround proposal for karmic is to ship a working but unsupported multi-cluster mode, by suggesting vtun usage in eucalyptus and leaving it in universe. There is no time left to migrate from using vtun to openvpn for proper layer-2 encrypted tunneling.

For karmic+1 this would be revisited so that multi-cluster capabilities are fully supported in main, by removing eucalyptus dependency on vtun and switching to openvpn or an IPsec implementation.