Routing packet to TCP tunnel client program

A system comprising:

• a network access device including a virtual internet protocol (IP) point-to-point interface configured to process network packets), wherein the network access device is configured to be accessed using an application programming interface (API) and to connect to a host or server running a TCP tunnel program, the network access device comprising one or more processors and a data storage system in communication with the one or more processors, wherein the data storage system comprises instructions thereon that, when executed by the one or more processors, causes the one or more processors to:
• establish an encrypted connection with a host using a transmission control protocol (TCP);
• determine that a packet to be transmitted to the host is to be routed via the TCP tunnel client program;
• send, based on the determination, the packet to the TCP tunnel client program;
• encrypt, sign, and fragment, using the TCP tunnel client program, the packet to produce an encrypted packet with instructions for control of network devices;
• and
• send, using the TCP, the encrypted packet to a remote endpoint associated with the host.