IP Network Design with End-to-End QoS Constraints: The VPN Case