use http tunneling similar to upgrade