In some network environments, a local machine may not have direct access to a remote server, while a jumpbox has access to both the local network and the remote server.<\/p>\n\n\n\n
SSH local port forwarding can be used in this situation. It creates a secure tunnel from a port on the local machine through the jumpbox to a specific port on the remote server.<\/p>\n\n\n\n
This allows you to connect to the remote service using the local machine’s loopback address, such as Before setting up SSH port forwarding, make sure:<\/p>\n\n\n\n Use the following SSH command:<\/p>\n\n\n\n Where:<\/p>\n\n\n\n Once the SSH session is established, connections to the local source port are forwarded through the SSH tunnel to the destination server.<\/p>\n\n\n\n For example, suppose you need to access the RDP service on a remote Windows server, but your local machine cannot directly reach the server.<\/p>\n\n\n\n RDP normally uses port Run the following command from your local machine:<\/p>\n\n\n\n This creates the following connection path:<\/p>\n\n\n\n After the SSH tunnel is established, open your RDP client and connect to:<\/p>\n\n\n\n Port:<\/p>\n\n\n\n The RDP connection from your local machine will be forwarded through the jumpbox to the remote server.<\/p>\n\n\n\n The SSH session must remain active while the port-forwarding tunnel is being used.<\/p>\n\n\n\n If you want SSH to establish the tunnel without opening an interactive shell, you can use:<\/p>\n\n\n\n The Security Note:<\/strong> Use SSH keys or other secure authentication methods where possible, and avoid using privileged accounts such as SSH local port forwarding is useful when your local machine cannot directly access a remote service but a jumpbox can reach it.<\/p>\n\n\n\n By creating an SSH tunnel with the SSH local port forwarding creates a tunnel from a port on your local machine through an SSH server to a destination server and port.<\/p>\n\n\n\n A jumpbox can act as an intermediary when your local machine cannot directly reach the destination server but the jumpbox has network access to it.<\/p>\n\n\n\n Yes. RDP traffic can be forwarded through SSH using port The local port is opened by the SSH client on your machine. Connecting to Yes. The SSH tunnel normally remains available only while the SSH connection providing the forwarding is active.<\/p>\n\n\n\n127.0.0.1<\/code>.<\/p>\n\n\n\nPrerequisites<\/h2>\n\n\n\n
\n
Implementation<\/h2>\n\n\n\n
Step 1: Understand the SSH Port Forwarding Command<\/h3>\n\n\n\n
ssh -L <SOURCEPORT>:<IPADDRESS>:<DESTINATIONPORT> userid@<JUMPBOXIPADDRESS><\/pre>\n\n\n\n
\n
Step 2: Configure RDP Port Forwarding<\/h3>\n\n\n\n
3389<\/code>.<\/p>\n\n\n\nssh -L 3389:<IPADDRESS>:3389 root@<JUMPBOXIP><\/pre>\n\n\n\n
Local Machine\n127.0.0.1:3389\n |\n | SSH Tunnel\n v\n Jumpbox\n |\n | Port 3389\n v\nRemote Server\n<IPADDRESS>:3389<\/pre>\n\n\n\n
Step 3: Access the Remote RDP Service<\/h3>\n\n\n\n
127.0.0.1<\/pre>\n\n\n\n
3389<\/pre>\n\n\n\n
Step 4: Keep the SSH Tunnel Active<\/h3>\n\n\n\n
ssh -N -L 3389:<IPADDRESS>:3389 root@<JUMPBOXIP><\/pre>\n\n\n\n
-N<\/code> option tells SSH not to execute a remote command and is useful when SSH is being used only for port forwarding.<\/p>\n\n\n\n\n
root<\/code> for routine access when a restricted account is sufficient.<\/p>\n<\/blockquote>\n\n\n\nConclusion<\/h2>\n\n\n\n
-L<\/code> option, you can expose the remote service through a local port and access it using 127.0.0.1<\/code>. This approach can be useful for RDP, database services, web applications, and other TCP-based services that are reachable from the jumpbox.<\/p>\n\n\n\nFAQs<\/h2>\n\n\n\n
1. What is SSH local port forwarding?<\/h3>\n\n\n\n
2. Why use a jumpbox for port forwarding?<\/h3>\n\n\n\n
3. Can I use SSH port forwarding for RDP?<\/h3>\n\n\n\n
3389<\/code>, provided the jumpbox can reach the remote Windows server.<\/p>\n\n\n\n4. Why do I connect to 127.0.0.1?<\/h3>\n\n\n\n
127.0.0.1<\/code> sends the traffic through the SSH tunnel to the configured destination.<\/p>\n\n\n\n5. Does the SSH connection need to remain active?<\/h3>\n\n\n\n
Related Articles<\/h2>\n\n\n\n
\n
Read the article<\/a><\/li>\n<\/ul>\n\n\n\nTalk to our experts<\/h2>\n\n\n\n