Port forwarding to different destination

Content

Hello,

My compute instance have 01 Public IP and 01 Private IP. Now I'd like to do like this:

From Internet ==> PublicIP:8000/tcp ==> PrivateIP:9000/tcp (change destination port)

From security list, I only see the ingress rule permit from Internet to port 8000, but how to forward to different destination port in Private IP ? Please help, thanks.