From @weinand:
Today the tunneling service blindly forwards all communication ports.
This includes ports that are used for debugging (even if our remote debugging feature does not need these ports to be forwarded).
This is confusing for users because they see ports that they are not really interested in.

I propose to add extension API so that individual ports or port ranges can be excluded from forwarding.
Debug extensions could use this API.