Replacing a VPS Reverse SSH Tunnel Without Losing Rollback

Fri, 10 Jul 2026 17:00:00 +0300

My self-hosted applications ran on a desktop at home. Cloudflare sent public traffic to a VPS, and the VPS forwarded it through a reverse SSH tunnel to Nginx on the home server. The design avoided inbound port forwarding and gave me a familiar SSH-based recovery path.

Then Mattermost messages began arriving late. API calls paused before returning, and WebSockets felt sticky. Nothing was fully down, so every component looked innocent on its own.

Network-Diagnostics on DRM HSE

Replacing a VPS Reverse SSH Tunnel Without Losing Rollback