I am investigating the use of AWS IoT Management. Especially the Secure Tunneling feature they have in their "AWS IoT Device Client" ( https://github.com/awslabs/aws-iot-device-client#current-capabilities ) which can be triggered on the management side of things is very interesting. The IoT device can reside behind a (customers') firewall while having an outgoing HTTPS or (MQTT over WSS) connection to the platform. This capability still provides the possibility to SSH into it for instance.
I am looking for an (open source) alternative for this for this. Do you have any suggestions and experiences?