Is GRE necessary for an IP-only tunnel

gretunnel

I need to build a simple point-to-point tunnel to connect an office through an area of the network we trust but directly don't control. Does the tunnel need to be GRE-encapsulated or can I use direct IP-in-IP? (We won't be using IPsec for this particular implementation.)

Best Answer

Either method will work. I personally prefer GRE, but there should be no practical difference between the two for your use case. (GRE can transport other layer3 protocols than just IP, though.)

The only thing to really keep in mind is that GRE incurs a tiny bit of extra overhead as opposed to IPinIP.