Add tunnel mode

To support local port forwarding.