Self-hosted HTTP tunnels with SSH and nginx

Описание и применение

Развертывание публичного HTTP‑туннеля через SSH‑обратный туннель и nginx, позволяющее внешним клиентам обращаться к локальному веб‑сервису без открытия портов в сети.

Задача

Expose a local HTTP service to the internet without opening ports on the firewall.

Результат

The local HTTP service becomes publicly accessible through a secure SSH tunnel and nginx reverse proxy, without exposing any ports on the private network.

Рабочий процесс

• 1. Start an SSH reverse tunnel from the local server to a public SSH host: ssh -R 80:localhost:8080 user@public-host
• 2. Configure nginx on the public host to proxy requests to the tunnel endpoint.
• 3. Update DNS to point the desired domain to the public host's IP.
• 4. Verify external access via a browser or curl.

Доказательства

Self-hosted HTTP tunnels with SSH and nginx

Источник

Start an SSH reverse tunnel from the local server to a public SSH host: ssh -R 80:localhost:8080 user@public-host

Источник