New routed IPsec VPN mode committed
-current by David Gwynne (dlg@), likely to be a prominent item for the upcoming OpenBSD 7.4 release.
The main log message:
add sec(4) to support route based ipsec vpns.
Some excerpts from the commit messages by dlg@ explains its purpose and design: