SSH remote port forward for cellular hotspot - remote installation

[stlalpha]

Hi,

I have a remote install that I am connecting to the internet via a verizon jetpack hotspot. This allows me to install this dvr in a remote rural location that doesnt have any broadband. I have done this by creating a ethernet -> wifi bridge effectively using a raspberry pi 3 and dnsmasq. The dvr plugs into the raspberry pi's ethernet (192.168.2.1), gets a static dns reservation (192.168.2.10) and then the rpi is joined to the wifi network of the jetpack, and thats how I get out to the internet. In order to get INTO the dvr from the outside world, I have a jump host running on AWS that is publicly accessible. I remote port forward tcp 37777 from the rpi to tcp 37777 on 192.168.2.10 on the dvr. Its a bit indirect, but works.

I have a problem

The dvr's ethernet behaves very oddly - when I ping from the rpi to the dvr, it takes 6-8ms rtt, which is way too long and also very erratic - no loss, but plenty of delay. Why? Also it seems to go unresponsive (dvr functionality on console remains functioning) - rebooting the rpi tends to bring it back online.

Anyone ever dealt with this before? Any ideas?

[stlalpha]

I solved it - i was missing the iptables entries to get traffic out beyond the layer 2 interface local to the dvr/rpi.

I have a generic rpi image (stretch) that can be used to connect to a third party via reverse ssh tunnel to penetrate firewalls/cellular hotspot setups and allow you to do nice remote installs if anyone is interested. pm me.