This is what I was wondering when reading the article.

I do SSH forwarding just fine with a CF tunnel. No extra services needed.