Connecting my Web server to a new reverse proxy so it's reachable on the Internet. But mysteriously the new proxy just refused to work no matter what. Tinkered with DNS, tunnel config, crypto keys and route tables for hours without success. Solution: allow the new IP address on the hypervisor firewall.