Accessing a machine with a non-static IP from outside the network [closed]

Question

I have a machine listening for ssh connections within a university network. The way that they've configured the network is such that each building is assigned a single external IP. I have no ability to change network infrastructure. Supposing that I know the current non-static internal IP of the machine that I want to access as well as it's external IP, how can I make the connection from the outside (assuming there is no interference from any sort of firewall)?

Answer 1

You have to do one of two things, and they both require a third machine with a public IP address running software you control:

1) Setup a VPN between that machine and some external machine with a public IP. Connect into that VPN and use it to access the machine.

2) Have that machine connect out to a third machine that operates as a proxy. Connect to the third machine, have it and the machine you are connecting to cooperate to attach an outbound connection from that machine to your outbound connection to the third machine and proxy that to an inbound 'loopback' connection to the machine's SSH client.

Here's a more detailed explanation of how method 2 works.

1. A program running on the machine you wish to SSH into makes an outbound connection to the third machine.

2. You make an outbound connection to the third machine. You tell it you wish to make a connection to the SSH client on the inside machine.

3. The third machine tells the inside machine that you wish to make an SSH connection to it. It makes another TCP connection to the third machine.

4. The third machine tells you that it is ready. You make an SSH connection to the third machine. The third machine proxies the SSH connection to the inside machine's second connection made in step 3.

5. The inside machine completes the connection and proxies between the connection made in step 4 and a new 'loopback' connection to the SSH server.

6. You are now talking to the inside machine's SSH server on a connection that appears to be from itself to itself, but actually through two proxies (one on the third machine between its two inbound connections and one on that local machine).