SSH tunneling and port forwarding can secure TCP traffic by encrypting insecure connections, bypassing firewalls, and connecting to servers behind NAT. Key configurations include enabling port forwarding on the SSH server, using jumphosts for indirect connections, and specifying bind addresses. Various examples for local, remote, and dynamic port forwarding are provided, along with tips for running SSH in the background and keeping the connection alive. Limitations include issues with UDP and TCP-over-TCP, and the fact that SSH tunneling is not a VPN replacement.
Table of contents
Use cases #Configuration / Preparation #SSH jumphost / SSH tunnel #Local Port Forwarding #Remote Port Forwarding #Dynamic port forwarding #SSH TUN/TAP tunnelingHow to run SSH in the background #Keep SSH connection aliveLimitations #Sort: