- CloseRead or CloseWriter - tunnel enable/disable - stream.run check errors on Open - per tunnel, per stream statistics - systemd socket activation - tun: separate data and control packets (route) - tun: auto created interface and auto ip address from pool - transparent proxy with REDIRECT and TPROXY - special variable prefix for defered evaluation - tun-server - go tests - docs - tproxy usage