Proxy service for iACS operations via IBM i system

Provide a proxy service for all IBM iACS functionality like 5250, ssh, database access and management, IFS access and spool file management, so a remote user can connect to a secured IBM i system and from this connect to the target system - direct connect to the target system is not possible due to network restrictions.

IBM iACS is used not only for 5250 display functions, but also for ssh access, database management, spool file access etc.
In larger environments, where you have multiple IBM i systems in multi tenant setups with dedicated networks, usually a jump pc as a proxy is used which can be connected by an operator from a remote location, and then from this pc an iACS connection to the target IBM i system is made.
As this jump pc often is run with a different operating system like windows or linux, this will create additional security and systems management measures to ensure secure access to this pc. Often, a dedicated IBM i environment is used for central management or operations work like monitoring, backup management or performance data collection, so this centralized and highly secured system already does exist.
A "proxy" for all iACS services would be great to reduce complexity of multi-tenant environments and give the operators the possibility to use only one IBM i environment for these works.