OKS tunnel endpoint