if ss can not work Remember change port to large than 8000 or large (this is important)decide whether disable or enable ip forwarding( I have test it does not matter,) 后续证明是端口大小有限制 不是ip forwarding的问题。