I have a number of remote servers I lock down by restricting SSH to specific IPs. Equally, our internal customer admin tools are also locked down by IP. This is fine when working from the office but if I am at a different location (perhaps on public wifi) or on my iPhone, the IPs will be changing.
What is the best way to set up remote access so that access can be allowed from any location but still maintaining security?
My answer would be to set up a VPN to tunnel all connections through and only allow the VPN IP access. If this is the route to go down, I do not want the VPN located in the office but would rather have it remotely managed. Are there any VPN-as-a-service providers?