Rename tls_stream to tun_stream and optimize tunnel stream close.