allocate tunnel