Every single of All those 3 answers have drawbacks, so you have to meticulously consider, if you actually need To achieve this certain forwarding.
Such as if port numbers are modified by NAT on both host, there is no approach to reconstruct Those people. It's also not a presented, that relationship tracking will operate the right way, if the very first packet it 카지노 sees can be a SYN-ACK rather then an ACK.
I've developed a Docker picture that makes use of this process to immediately handle the iptables for you, using possibly ecosystem variables or dynamically with etcd (or both of those)