Back around the early 2000's we were running something of an ad-hoc VPN of dynamically connected servers. It was somewhat similar to the way Napster worked with one central server and many connected nodes. These connections relied on manual configuration, for the most part, and that did involve a fair amount of tunneling.