For deploying multiple Site-to-Site VPN connections between on-premises locations and an Azure virtual network using a route-based VPN gateway, which tunneling protocol is recommended?