ssh connection through RED

Could you help me a little bit.there is situation:

ASG---->RED(proxy)--->Internal network.
How to configure asg to let ssh connection through RED to internal network linux machine.

used:
Network definition
type:host
interface:any
target:linux machine
DNAT
t.source:any
t.service:ssh
t.destination: RED internal address ( i down know hwy,but to choose external is no opportunity)
destination:linux machine

Firewall rule:

any->ssh->linux machine->allow

what am i doing wrong? help please.

thanks in advance