But still doesn’t do udp or ip, only let’s you connect out (not in, which is often desirable but still a limitation).

Also, you lose information about where connections originate - to the recipient, it all looks like it came from the sshuttle host.