simplify tunnel setup