a connection now contains a TunnelExit class