If you have an internal app or homelab app or whatever, why don't you just... route to it? Configure your firewall to let traffic in and out?
I get there's a tunnel provided by this sort of software, I just don't understand how so many people actually need one.