Hey,
The part that isn’t bundled in openBalena is the endpoint which listens for incoming HTTP connections and forwards them to the device over the VPN. If you run balena tunnel ... in the CLI then this sets up a listening endpoint on your workstation and will forward the connections to the device.
If you need help, then CLI has examples for this command in the --help 