Which VPN technology is tunnel-less?

GET VPN uses a Key Server to distribute group encryption keys to all Group Members, allowing them to encrypt and decrypt traffic without building point-to-point tunnels. The original source and destination IP addresses are preserved in the packet header, enabling routing decisions to be made on the native IP addresses while still providing encryption - this is what makes GET VPN fundamentally tunnel-less.

DMVPN (Dynamic Multipoint VPN) uses GRE tunnels and NHRP to dynamically build spoke-to-spoke tunnels - it is a tunnel-based technology.

MPLS is a packet-forwarding technology using labels; while it can support VPN services, it is not classified as a tunnel-less VPN in the same context as GET VPN.

IPsec VPN in traditional deployments creates tunnel-mode connections between peers, making it a tunnel-based technology.