This seems like an interesting way to manage a set of Docker hosts without resorting to mapping dozens of individual TCP ports.
Not too crazy about the addressing in the example, though, and having a bunch of tunnels between individual machines is going to be a pain to maintain. We need something better.