don't process pending tunnel twice