It know has a tunnel command. See manage help tunnel for more information and examples. There is not need to open the ports