tunnel endpoint: wss:///tunnel?host=&port=443