- CloseRead or CloseWriter - tunnel enable/disable - stream.run check errors on Open - per tunnel, per stream statistics - systemd socket activation - tun: separate data and control packets (route) - tun: auto created interface and auto ip address from pool - go tests - docs