Port forwarding
Save local, remote and dynamic (SOCKS) forwards and start them with a click.
Kinds of forward
| Kind | Like | What it does |
|---|---|---|
| Local | ssh -L |
A port on your Mac reaches a destination through the server, such as a database that only the server can see. |
| Remote | ssh -R |
A port on the server reaches a destination through your Mac. |
| Dynamic | ssh -D |
A SOCKS proxy on your Mac: apps set to use it connect through the server. |
Add a forward
In Port Forwarding, add a forward and fill in:
- a label and the host it runs over;
- the kind;
- the bind address and port: where it listens. For local and dynamic forwards the address
defaults to
127.0.0.1, so only your Mac can use it; for remote forwards, to the server’s default; - for local and remote forwards, the destination host and port.
Start and stop
Each saved forward has Start and Stop. Starting one connects to its host the way a session does: the host key is checked, and you’re asked for a password if none is saved. Forwards stop when you sign out, and when the app locks if you’ve chosen to disconnect sessions on lock.
The dynamic forward speaks SOCKS 5 (without a password) and SOCKS 4 and 4a.
Forwards are saved in your vault and sync to your other devices; they run only on the Mac where you start them.