yes, it peeks into IP packets to handle fragmentation when sending onto tunnel ports and does mss clamping. but it can carry arbitrary ethernet packets just fine (between ethernets).