Now all @digitalocean needs to add is private subnets between nodes in data centers so I can burn all the TLS/SSH tunnel crap that I have.