Forward incoming traffic to specific user?

[motz0815]

So, Hi!
I was wondering if it is possible to use Algo in a way that it forwards any traffic to a user connected, a little more detailed:

So, my Homeserver is connected to my Algo in a datacenter all the time. There is a webserver running on the Homeserver, is there a way to configure Algo so that it forwards requests made to it's IP Adress to my Homeserver, so the Homeserver can be used as a webserver while still connected?

That would be a great way to just "get a static IP-Adress", because the one I have at home is behind a CGNAT, so not even a DDNS would do anything.

Thanks in advance for your help with this!

[vitaly-zdanevich]

Server

sudo ufw disable (how to make it persistent?)

/etc/ssh/sshd_config

seAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*
Subsystem	sftp	/usr/lib/openssh/sftp-server
# BEGIN ANSIBLE MANAGED BLOCK ssh_tunneling_role
Match Group algo
    AllowTcpForwarding yes
    AllowAgentForwarding no
    AllowStreamLocalForwarding yes
    PermitTunnel yes
    X11Forwarding no
    GatewayPorts yes
# END ANSIBLE MANAGED BLOCK ssh_tunneling_role

Added GatewayPorts yes

Client

Without config:

ssh -F 51.16.88.88/ssh_config -R 63368:localhost:63368 51.16.88.88

With config

Host 51.16.88.88
  User algo
  Port 4160
  IdentitiesOnly yes
  IdentityFile /home/vitaly/.config/algo-vpn/algo.pem
  KeepAlive yes
  ServerAliveInterval 30
  RemoteForward 63368 localhost:8000

Connect with that config:

ssh -F 51.16.88.88/ssh_config 51.16.88.88

So now I can start on my laptop behind NAT on dynamic IP:

python -m http.server

And

curl http://51.16.88.88:63368

It works the same with and without VPN.