If there is no dedicated IP, what is the way out?

Question

SSH

The question is more of an entry-level and sounds like this: If there is a "server" and it has access to the network via a 3G modem or someone's wi-fi, or the provider's cable is not important. It is clear that Vasya's neighbor will not give a password from the admin panel - forward the port, and it's not 100% that Vasya has a dedicated ip, you also don't want to pay extra to the provider. But how all the same to get through to our "server"?
There are several ideas, given that there is also a VPS server available and both ideas of the idea rest on the same vps.
1. Raise a vpn server to vps, connect to it, and then forward the ports of the connected client to the network under ip vpn.
2. I heard something about reverse ssh tunnels, it is possible to build on this.
What would be the most rational solution, what would you recommend?

Answer 1

To be honest, as far as I know it is possible to use tor.
You set up "hidden service" on your "server" and forward ssh through it - access through the tor network is provided.
In general, this works with any protocol based on tcp
. I can post an example of the torrc configuration.

Answer 2

In general, if you do not pay attention to Alex yes, there is almost no way without a separate server. Still, someone needs to know. However, I noticed some confusion in the terminology. In general, there are three ways to limit IP in a network:
+ everyone is sent behind NAT; classic, no access to computers from outside, however, the most secure ;) It doesn't matter if it's dynamic or static - it doesn't matter at all.
+ dynamic external IP, was once popular, and even now it is often found - this is when a different IP is defined for different sessions; however, the dominance of Wi-Fi routers and home servers reduces the idea of ​​balancing to almost "NO". Treat with noip.com .
+ Static external IP - the most true, because it completely removes any restrictions.
In general, an external server will be required in any case, because somehow it will be necessary to "acquaint" the client with the server, which is still behind NAT, that is, it is so easy not to see it. But. I advise you to pay attention to IPv6 , which has recently become relatively common. In any case, tunneling technology will be used, when IPv6 packets are shoved into IPv4 packets, while some external server will introduce us. You can set up this business yourself, you can use third-party services, the point is not important. It is important that if you are not lucky enough to be behind NAT, you will have to work hard.

Answer 3

Set up a VPN. And even easier - to purchase a separate VPN.