function spec to tunnel from application