title: How does a VPN know the ultimate destination of a client's packets?
body: <p>I'm trying to imagine the structure of packets sent from a VPN client to its server. If I want to visit google.com, does the actual packet with google's address as destination get encapsulated in another packet destined for the VPN server? Or the only packet the client sends is one destined for the VPN, which in turn infers the ultimate destination from the Host field in the HTTP request? I'm kinda lost to the details of this kind of "tunnelling" everyone talks about abstractly.</p>