What is an SSH tunnel and how does it work?

What can you do with SSH tunnel?

SSH tunneling is a method of transporting arbitrary networking data over an encrypted SSH connection. It can be used to add encryption to legacy applications. It can also be used to implement VPNs (Virtual Private Networks) and access intranet services across firewalls.

Why do we need SSH tunneling?

SSH tunneling is a method to transport additional data streams within an existing SSH session. SSH tunneling helps achieve security use cases such as remote web service access without exposing port on the internet, accessing server behind NAT, exposing local port to the internet.

Is SSH tunneling the same as port forwarding?

SSH port forwarding is often referred to as SSH tunneling, and the two terms are used interchangeably. The encrypted SSH 'tunnel' serves as a vessel to transfer assorted data and deliver it safely to the remote system. This method is regularly used to circumvent standard firewall security protocols.

Is SSH tunnel a VPN?

Another key difference between VPN and SSH tunneling is that VPN runs on the transport layer while SSH runs on the application layer of a network. Because VPN deals with the network itself, it can function as a completely separate network while still utilizing resources within a public network.