Building an adaptive VPN transport for hostile networks: where is this architecture wrong?