VPN Failover Between VPS Nodes

TL;DR: Automatic multi-hop failover can introduce critical security risks if a tunnel failure silently reverts egress traffic to an unintended public IP. In a fail-closed architecture, the default response to a tunnel outage is a complete network blackhole. Recovery requires controlled self-healing or deliberate operator-initiated migration.