SSH Client/Server Configuraton

I need help setting up a simple SSH solution between me and my clients. I need to be able to run a simple SSH client on my customers server (as a windows service) that will connect to an SSH server on my network. Once connected I need to be able to send LDAP requests (TCP:636) to my SSH server that will be relayed to the customers server. 1. I will have SSH client on 5+ customer machines, that will need to make "localhost:389" available to me. 2. All SSH clients will connect to my STunnel Server via "MY-PUBLIC-DOMAIN:22" and need to authenticate certificate or something - A. Need to make sure that only clients I authorize will be able to connect to my SSH server - B. The connection should never allow the client to access my network, it should be a reverse tunnel allowing me to access the client. - C. I need to be able to identify each client that is connected to my server (also see #3 below) 3. Each client should be assigned dedicated ports on my server based on the reverse tunnel (1001, 1002, 1003, etc). When the SSH client disconnects and reconnects the same port on my side needs to be reused. 4. Another server on my network will send LDAP requests to the SSH Server via these custom ports, and the requests need to be securely sent back through the tunnel to each clients LDAP server. The usage example above has been tested using [login to view URL] however I do not want to proxy through another network or service. The server component will exist only on my network. Other similar services for reference: [login to view URL] [login to view URL] Please see the attached image also for reference