http://lomteqnxehqjdemqgzse7xchjlusgnpoxq2fpmz3yuukyfzc22t5gwyd.onion/jira_projects/browse/BHAYSTACKG.html
The project itself simply generates traffic, it's up to the administrator to ensure that the traffic is routed over the relevant tunnel (whether that's a VPN, Tor, an SSH tunnel or anything else). One thing the project doesn't try to address is the issue of an adversary who's also able to monitor traffic at your endpoint (i.e. if you're using a VPN, is 'public' traffic then emanating from the endpoint).