I'd expect an anonymous inbound tunnel to be better than an anonymous outbound proxy and we have plenty of the latter.