flag to enable/disable tunneling