Tunnels or a plain reverse proxy: pick your dependency

Both are a third party you are trusting with your traffic. One of them is a company and the other one is a certificate authority, so choose which outage you would rather explain.