I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. So, there is a NAT server in public subnet which forward all outbound traffic from private subnet to outer network.
Currently, I can SSH from public subnet to private subnet, also SSH from NAT to private subnet. However, what I want is SSH from any machine(home laptop, office machine and mobile) to instances in private subnet.
I have done some research that I can setup the NAT box to forward SSH to instance in private subnet. But I got not luck for this.
Can anyone list what I need to setup to make this possible.
Naming are :
laptop (any device outside the VPC)
nat (the NAT server in the public subnet)
destination (the server in the private subnet which I want to connect to)
Not sure following are limitations or not:
The "destination" does not have a public IP, only a subnet ip, for example 10.0.0.1 The "destination" can not connect to "nat" via nat's public. There are several "destination" servers, do I need to setup one for each?