The mesh topology design problem in overlay virtual private networks is studied. Given a set of customer nodes and an associated traffic matrix, tunnels that connect node pairs through a service provider network are determined such that the total multi-hopped traffic is minimised. A tabu search based heuristic is proposed.