Every single of Individuals three solutions have negatives, so you might want to carefully consider, if you really want To accomplish this specific forwarding.
By way of example if port quantities are modified by NAT on either host, there isn't a method to reconstruct People. It is also not a provided, that relationship monitoring will function effectively, if the 1st packet it sees is a SYN-ACK as opposed to an ACK.
I've created a Docker image that works by using this method to mechanically handle the iptables in your case, utilizing both environment variables or dynamically 카지노 with etcd (or equally)