How to set up SSH Tunnel on Linux
An SSH tunnel sends your traffic through the server using a username and password. Besides plain SSH, the server also accepts SSH over TLS and over WebSocket, which help on restrictive networks.
Last reviewed
What you need
- An active SSH configuration from this site
- Hostname, ports, username and password from your configuration page
App
OpenSSH (built in)
Where each detail goes
| On your configuration page | In the app or settings |
|---|---|
| Hostname | Host / Server |
| Port | SSH port |
| SSL/TLS port | SSL/TLS (stunnel) port, with SNI if shown |
| WebSocket port | WebSocket port (and path for WS+TLS) |
| Username / Password | Username / Password |
Steps
-
Run
ssh -N -D 1080 -p <Port> <username>@<Hostname>with the values from your configuration page.
Illustration — your app may look slightly different. -
Type yes to trust the server the first time, then enter your password.
Illustration — your app may look slightly different. -
Set your browser or desktop proxy to SOCKS5 127.0.0.1:1080 (enable "proxy DNS" in Firefox).
Illustration — your app may look slightly different.
Check that it works
The app shows it is connected (or the terminal stays open without errors). Search the web for "what is my IP" in a browser that uses the tunnel.
Disconnect
Press Ctrl+C and turn the proxy off.
Troubleshooting
Permission denied / auth failed
Copy the username and password again from your configuration page. The configuration may have expired.
Connection times out
Your network may block port 22. Switch the app to SSL/TLS or WebSocket mode using the ports on your configuration page.
Only the browser uses the VPN
That is normal for a SOCKS proxy on computers. Set the proxy in the system network settings to cover more apps.