How to organize an ssh connection over an external network?

Question

SSH

Good afternoon. I scoured the Internet, saw a bunch of examples of setting up ssh on ubuntu. But the problem is that ssh only works on the local network. There is an external static ip. How to organize work also on the external network Internet.

Answer 1

There are 2 options,
1. Option: port forwarding. (you will need to configure and strengthen protection, remove light passwords, set file2ban and, as an option, two-factor authorization (either allow access to iptables only from a specific IP or subnet), since ssh ports are scanned quickly and everyone is pressed into them.. ... )
2. Option: use an external ssh server to which your machine (located behind nat) will connect, and to which you in turn will connect. Let me explain how it works: In this case, you will have an external ssh server (acting as an intermediate link) on which, after connecting, your machine will leave its ssh port open. In turn, after you connect to an external server, you can see the open ssh port left by your machine on it and use it to connect to the machine behind nat.