open direct tunnel when needed