...The server is publicly available and proxies incoming connections to the client. Then the connection is further proxied in the client's network. The tunnel is based on HTTP/2 for speed and security. There is a single TCP connection between the client and server and all the proxied connections are multiplexed using HTTP/2.