Tunnels, VPNs, and meshes are treated as virtual network interfaces, so
firewall rules and routing policies can can be applied on top of and between
them.