conn abc
   authby=secret
   auth=esp
   auto=start
   type=tunnel
   forceencaps=no

   left=%defaultroute
   leftid=52.50.100.70
   leftnexthop=%defaultroute
   leftsourceip=10.203.0.153

   right=89.110.203.12
   rightsubnet=89.110.203.128/26
   rightnexthop=%defaultroute
   ike=aes128-sha1;modp1024!
   phase2alg=aes128-sha1;modp1024
   ikelifetime=28800s
   pfs=yes
   salifetime=3600s
   keyexchange=ike

iptables -t nat -A PREROUTING -p tcp --dport 9999 -j DNAT --to-destination 89.110.203.148:2775
iptables -t nat -A POSTROUTING -p tcp -d 89.110.203.148 --dport 2775 -j SNAT --to-source 172.31.22.88

socat TCP-LISTEN:9999,fork TCP:89.110.203.148:2775