Yes I see, thanks. Solution 1 seems a bit complex for me, I am not sure what configs to modify, and also sometimes I use dynamic source IP.
I found a way to configure port forwarding at VPN provider endpoint. I can use that to forward connection to my ssh server. Just need to add the VPN...