According to the iproute2 man page a tunnel can be instructed to only use one physical interface to send out data to its remote site.
http://man7.org/linux/man-pages/man8/ip-tunnel.8.html
dev NAME bind the tunnel to the device NAME so that tunneled packets will only be routed via this device and will not be able to escape to another device when the route to endpoint changes.
This can be handy if an IP tunnel is source from a different VRF then the VRF it is assigned to deliver the payload traffic to.
XML CLI syntax should be:
<leafNode name="source-interface"> <properties> <help>Physical Interface used for underlaying traffic</help> <completionHelp> <script>${vyos_completion_dir}/list_interfaces.py</script> </completionHelp> </properties> </leafNode>