I also noticed the following.. which actually helps answer another of the questions.
When you have a tunneller binding.... you need to use the host mode
Alternatively.. the link uses the underlying "transport" which could either by tcp or udp
does that make sense?
link:
dialers:
- binding: transport
listeners:
- binding: transport