Paramiko reverse SSH tunnel. Port seventy-eight sixty-two. The VPS sees it as localhost — it doesn't know it's talking to an ARM chip on a Samsung Galaxy sitting on a table. The hypervisor can steal CPU cycles but it cannot steal a tunnel that doesn't exist in its network map.