- CloseRead or CloseWriter - tunnel enable/disable - stream.run check errors on Open - per tunnel, per stream statistics - http connect server proxy module - systemd socket activation - tun: separate data and control packets (route) - tun: auto created interface and auto ip address from pool