[fix] Support httpOver* outbound proxying and make tunnel explicit