Tunneling — Index

Use these notes only for systems and routes named in written authorization. Bind listeners to loopback by default, route the smallest approved prefix, record tunnel endpoints, and remove routes and processes after validation.

Required evidence

• approved source, destination, ports, and time window
• listener and route state before and after the test
• one benign application request through the tunnel
• gateway, endpoint, and network telemetry timestamps
• cleanup confirmation