I'm looking to move ssh off port 22, and had tried out sslh;
sslh ssl/ssh multiplexer - accepts HTTPS, SSH, OpenVPN, tinc and XMPP connections on the same port. This makes it possible to connect to any of these servers on port 443 (e.g. from inside a corporate firewall, which almost never block port 443) while still serving HTTPS on that port.
However those services then see traffic originate from 127.0.0.1, instead of the external host making the request - for authentication/logging/identification purposes I've had to disable sslh.
Recommendations for alternative options?
Should I investigate using stunnel to proxy ssh through nginx?