http://gpp6nwvsps43b3mfacsh433uroo6uyjvvpr6tgj4jh4n5ngxt7rqbvid.onion/posts/hynetwork-hysteria.html
If you can restrict the port 22 rule so that only certain source IP addresses are whitelisted for SSH access, then so much the better. For example, if you always connect to your server from source IP address XX.XX.XX.XX : nft add rule inet filter input tcp dport 22 ip saddr XX.XX.XX.XX/32 counter accept If you cannot restrict the port 22 rule, then you will have to open the port to the whole world instead: nft add rule inet filter input...