How to set up SSH Tunnel on Windows
An SSH tunnel sends your traffic through the server using a username and password. Besides plain SSH, the server also accepts SSH over TLS and over WebSocket, which help on restrictive networks.
Last reviewed
What you need
- An active SSH configuration from this site
- Hostname, ports, username and password from your configuration page
Where each detail goes
| On your configuration page | In the app or settings |
|---|---|
| Hostname | Host / Server |
| Port | SSH port |
| SSL/TLS port | SSL/TLS (stunnel) port, with SNI if shown |
| WebSocket port | WebSocket port (and path for WS+TLS) |
| Username / Password | Username / Password |
Steps
-
Install Bitvise SSH Client from bitvise.com (link above).
Illustration — your app may look slightly different. -
On the Login tab enter Host: your Hostname, Port: your Port, Username: your username, Initial method: password, and your password.
Illustration — your app may look slightly different. -
On the Services tab enable SOCKS/HTTP Proxy Forwarding on 127.0.0.1 port 1080.
Illustration — your app may look slightly different. -
Click Log in and accept the server key on first connection.
Illustration — your app may look slightly different. -
Set Windows (Settings → Network & internet → Proxy) or your browser to use the SOCKS proxy 127.0.0.1:1080.
Illustration — your app may look slightly different.
Check that it works
The app shows it is connected (or the terminal stays open without errors). Search the web for "what is my IP" in a browser that uses the tunnel.
Disconnect
Click Log out and turn the proxy setting off.
Troubleshooting
Permission denied / auth failed
Copy the username and password again from your configuration page. The configuration may have expired.
Connection times out
Your network may block port 22. Switch the app to SSL/TLS or WebSocket mode using the ports on your configuration page.
Only the browser uses the VPN
That is normal for a SOCKS proxy on computers. Set the proxy in the system network settings to cover more apps.