BGP Router Reflector and IPSec VPN Routing based

I don’t think that we support reflector configuration, but i may be wrong
regarding VPNs you probably need to dive deeper on internals
you can rung gre or vti and use it with bgp and/or ospf
That is what people do in AWS (vti+bgp)