step1: tunnel self