In his solution is use the “red” SSR for DSCP Marking and the “black” SSR for DSCP Steering of ESP traffic
+
The complete separation of control between red and black networks (different conductors managed by different teams) and
the use of the relay router to get around limitations of scenarios where both sides are behind a NAT.