always pick outbound tunnel before sending packet