- use 3-way handshake CREATE-PATH_ACK-ACK to delay traffic on new tunnels