Route incoming traffic to backend services (home server, K8s cluster, dev box), terminate SSL, and bypass CGNAT in one box. Pre-installed with Nginx Proxy Manager web GUI and an optional WireGuard tunnel back to your home network. Built for Self-hosters with home labs, CGNAT users, developers exposing internal services.
Every reverse proxy / tunnel plan includes free DDoS protection, full root access, IPv6 networking, daily snapshots, and 24/7 human support.
Order, wait 30 seconds for deploy, log in — your stack is running.
Nginx Proxy Manager GUI — add a domain, point at a backend IP:port, click 'Request SSL cert'. Done.
Every domain or subdomain gets a free 90-day cert, auto-renewed.
Add `wg0` on Pro/Premium to securely route to your home network — CGNAT bypass with no port forwarding.
Host as many domains and subdomains as you want. Each lands on a different backend.
Built-in OWASP CRS rules block SQLi, XSS, and common bot probes. Optional fail2ban for brute-force lockout.
Your home ISP gave you a shared IP? This VPS gives you a real one, then tunnels back. Self-hosted Cloudflare Tunnel alternative.
Route incoming traffic to backend services (home server, K8s cluster, dev box), terminate SSL, and bypass CGNAT in one box. Pre-installed with Nginx Proxy Manager web GUI and an optional WireGuard tunnel back to your home network.
You could install Nginx Proxy Manager on a generic $5 VPS. Most people who try spend an evening on the install, another on hardening, another on backups, and then it falls over the first time the kernel updates. We've done that work — every reverse proxy / tunnel plan is tuned, monitored, and updateable in one click.
No black boxes — here's the exact software shipped on every Reverse Proxy / Tunnel VPS plan.
The Reverse Proxy / Tunnel VPS image ships with: Nginx Proxy Manager + Caddy + WireGuard tunnel. We don't fork or patch — we use the official upstream releases, with sensible defaults for our hardware. Update on your schedule, not ours.
Everything runs in containers via Docker, so updates are atomic. If a release breaks something, roll back to the previous image in 30 seconds. No 'I broke prod by running apt upgrade' moments.
The same KVM hypervisor and enterprise NVMe drives we use across every OliveVPS region.
Pick from 20+ datacenter regions worldwide. Reverse Proxy / Tunnel VPS VPS pricing stays the same in every region — the hardware specs, the bandwidth allowance, the SSD speed. The only thing that changes is your latency to end users.
Cloudflare Tunnel works great until you need raw TCP (game servers, IRC, MQTT, custom protocols), or you don't want to send traffic through Cloudflare. Our reverse-proxy VPS is bandwidth-only — no inspection, no rate limits, no terms of service beyond standard abuse rules.
Many. Most users route 5–15 services through one proxy VPS — home Nextcloud, home Jellyfin, dev server, family photo gallery, all on different subdomains, all routing through the same VPS.
Only the ports and paths you explicitly configure. The WireGuard tunnel keeps your home network on a private subnet — only the reverse-proxy VPS can reach it, and only on the rules you set.
No — it's the VPS's outbound bandwidth that counts. Traffic in from clients → out to your home → back in → out to clients = single pass-through. We just count outbound.
Order in 60 seconds. Server live in 30. No setup fees, 7-day money-back guarantee.
Deploy Reverse Proxy / Tunnel VPS →