If you can read this over the public internet, the tunnel from this bench works. Served by the home bench, reached without exposing the home IP.