Socat would make the connections to ssh show up from the machine running socat, rather than the origin, which might have auditing/logging implications. iptable

Socat would make the connections to ssh show up from the machine running socat, rather than the origin, which might have auditing/logging implications. iptables with a dnat redirect addresses that.