shell: add tunnel support