Using an example of someone connecting to a VPS, an SSH tunnel will encrypt any traffic coming from the user to the VPS. Once it reaches the VPS network, the traffic is not encrypted and is easily sniffable by network administrators on that particular network. (am I understanding all that correctly?)
Is there a way to have the traffic encrypted on both ends so that neither side is susceptible to packet sniffing to reveal what kind of data/traffic/protocol is being transmitted?
EDIT: In my situation, I would be connecting from either work or home so I am interested in making sure the traffic is secured on the VPS's network so that it cannot be monitored. Is there any way to do this with SSH or would I need VPN?