Replace with your remote sudo user and server IP address or domain name. The port can be any user/registered ports or dynamic/private ports which range between 1024-65535. This works by allocating a socket to listen to port on the local side and optionally bound to specified bind_address. -D port : This tells SSH that we want to connect SSH SOCKS tunnel on specified port and what that does is it creates a local dynamic aplication-level port forwarding, SOCKS5 proxy that we can use to send any of our web traffic that supports a SOCKS5 proxy through.Causes most warning and diagnostic messages to be suppressed. This is useful for just forwarding ports.

-N : This tells SSH to not execute remote command once the tunnel is up.

-f: This means to forks the process to background just before the command execution.

Compression is desireable on slow connections, but will only slow down things if you're on fast network. -C : Compresses all data (using a standard gzip compression algorithm).So, to set up the tunnel, open your terminal and enter this: ssh -C -f -N -q -D 9999 Please also make sure to add the key to authorised keys in the server. It's good practice to give the SSH key a passphrase, but for this tutorial we will leave the passphrase blank for simplification. If you don't have one, please create one. I also assume that you already have the SSH key on your local machine. In this case we're using FireFox web browser.īefore we go through this, I recommend you to have an SSH key (for password-less authentication and security reasons). An application that supports SOCKS proxy.(sign up with my referal link and get 50$ DigitalOcean credit!) It tunnels all your web traffic through the remote machine. Why use SSH tunneling?Īs I said above, it can be used to secure yourself when browsing from potential Man-In-The-Middle attacks, firewalls evasion and securing traffic tunneling. To make all comparison between VPN and SOCKS5 proxy is a large topic, maybe we can cover this later. If all you need to secure is your web browsing, SOCKS5 proxy tunnel is a simple alternative. SOCKS5 proxy requires you to configure the application you are using such as a web browser to use the proxy server. One solution is to use VPN, though using SSH tunnel SOCKS5 proxy can also achieve the same results. More importantly, you also don’t want anyone spying on your activities! Sometimes when we use public wireless hotspots and any other insecure networks, or even if the network has overly restrictive firewall, you cannot browse or access certain websites. But this time, we are going to use the SSH tunnel as a SOCKS5 proxy to our local machine. SSH client is usually used to connect a client to a remote machine securely and for executing commands on a remote computer.

How to use tunnelbear with programs