bridge: always declare tunnel functions