I also have the same issue but safaricom tells people to use tunneling in production and testing check in docs tab under
Testing on localhost.