I also noticed the following.. which actually helps answer another of the questions.
When you have a tunneller binding.... you need to use the host mode
Alternatively.. the link uses the underlying "transport" which could either by tcp or udp
does that make sense?
link:
  dialers:
    - binding: transport
  listeners:
    - binding:          transport