{"id":1357,"date":"2014-11-14T23:35:06","date_gmt":"2014-11-15T05:35:06","guid":{"rendered":"http:\/\/blog.supportpro.com\/?p=1357"},"modified":"2026-03-25T04:50:22","modified_gmt":"2026-03-25T10:50:22","slug":"ssh-tunneling","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/ssh-tunneling\/","title":{"rendered":"SSH tunneling"},"content":{"rendered":"\n

SSH tunneling<\/strong> is used to tunnel all of the traffic from your local machine to a remote server that you have an account. SSH allows users to create TCP tunnels to send data over the network. The amazing thing about SSH tunnels is that they are encrypted.<\/p>\n\n\n\n

How tunneling works?<\/strong><\/p>\n\n\n\n

This works by allocating a socket to listen to port on the local side, optionally bound to the specified bind_address. Whenever a connection is made to this port, the connection is forwarded over the secure channel, and a connection is made to host port from the remote machine. Port forwardings can also be specified in the configuration file.<\/p>\n\n\n\n

There are two ways to create an SSH tunnel: local and remote port forwarding<\/strong><\/wp-block><\/p>\n\n\n\n

Local port forwarding is used in cases where we are on a private network which doesn\u2019t allow connections to a specific server.
For eg. lets say an a website test.com being blocked on a network. In this case we can create a tunnel through a server which isn\u2019t on our network and thus can access the website.<\/p>\n\n\n\n

For that use the following command in linux<\/p>\n\n\n\n

# ssh user@work.example.org -L 10000:test.com:80<\/em><\/code><\/pre>\n\n\n\n
The key here is -L which says we\u2019re doing local port forwarding. Then it says we\u2019re forwarding our local port 10000 to test.com:80, which is the default port for HTTP. Now open your browser and go to http:\/\/localhost:10000.
Remote port forwarding<\/a> is used to giving access to a service (SSH port tcp\/22) on your home machine (localhost) to people at work. Use the following syntax for it :<\/p>\n\n\n\n
# ssh user@work.example.org -R 10000:localhost:22<\/em><\/code><\/pre>\n\n\n\n
First you need to specify a local port on your machine which you wish to expose publicly, which in this case is 10000.
Next there is the address on which the server should listen to, and a port on which the server should listen to, which in this case is 22.
There is one more thing you need to do to enable this. SSH doesn\u2019t by default allow remote hosts to forwarded ports.
To enable this open \/etc\/ssh\/sshd_config using any file editor and add the following line somewhere in that config file.<\/p>\n\n\n\n
===
GatewayPorts yes
===<\/p>\n\n\n\n
After it save the file and restart the SSH service.<\/p>\n\n\n\n
Steps for tunneling in windows using putty<\/strong><\/span><\/p>\n\n\n\n