Correct, it’s equivalent to ssh tunneling except there’s some HTTP/websocket wrappers around it