First revision supports only one tunnel and is very hacky