Bastion

A bastion host is the only host permitted to be directly addressed via SSH from the internet.