SSH on closed ports

Question

SSH

On the working Internet, port 22 is closed, therefore it is impossible to simply ssh to the server. The question is how can this be done beautifully?
SSH on another port cannot be hung up. You cannot use a proxy (we get the Internet through a local proxy).

Answer 1

Unix is ​​required, which will be controlled by you and located on the Internet. Run the following on it:
ssh 127.0.0.1 -L 1.1.1.1:80:2.2.2.2:22, where:
1.1.1.1 is the IP of your server
2.2.2.2 is the IP of the server you need to get to according to the task condition.
I'm really not sure that this will pass through the proxy (there is no way to check now), but with NAT open on dst-port 80, it will work 100%

Answer 2

Back-connect is usually used in such cases.
That is, let the server itself cling to the client machine through the port that is available to it.

Answer 3

either use openvpn, or add a DNAT rule of port 443 to port 22 and break through the HTTP CONNECT proxy on port 443 of your server - this should be allowed in the proxy

Answer 4

In the general case, just setting up an outgoing VPN connection from your closed server to another one - your open one (this is how the local network works for me, connecting 4 computers that are widely spaced, three of them on Windows).

Answer 5

I would look in the direction of "port knocking", but according to the conditions it is not clear whether it is possible or not to use it ...

Answer 6

1) Try to set up Socks proxy over HTTP. It all depends on how your proxy is configured (whether it supports the connect method, for example). If there is a normal https, then google "ssh over https", everything is fine there too.
2) Raise a web interface to ssh on the server. Ready-made scripts exist, it's easy to set up. But you can't forward the port. It all depends on what you need ssh for.

Answer 7

For such things there is a Bouncer