apt-get install firewalld
systemctl enable firewalld
systemctl start firewalld

接着配置流量转发

echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf
sysctl -p
firewall-cmd --permanent --add-masquerade
# 20002可以改成其他端口
firewall-cmd --permanent --add-port=20002/tcp
firewall-cmd --permanent --add-port=20002/udp
# 8080和上面保持一致，国外ip改成你国外vps的ip，22改成国外服务器ssh端口
firewall-cmd --permanent --add-forward-port=port=20002:proto=tcp:toaddr=国外ip:toport=22
firewall-cmd --permanent --add-forward-port=port=20002:proto=udp:toaddr=国外ip:toport=22

重启

firewall-cmd --reload