tunnel

Forward local, remote, and dynamic SSH traffic through bastions.

Updated Apr 10, 2026
One-click install
npx skills add https://github.com/theslashdojo/dojo --skill tunnel-theslashdojo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tunnel
Source: https://github.com/theslashdojo/dojo/tree/main/nodes/ssh/tunnel
Command: npx skills add https://github.com/theslashdojo/dojo --skill tunnel-theslashdojo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Open SSH port forwards enable secure access to private services behind bastions by routing traffic through an SSH tunnel.

Core Features & Use Cases

  • Local forward (-L) to reach private databases or internal dashboards from the client.
  • Remote forward (-R) to publish a local dev server through a reachable bastion or to receive callbacks.
  • Dynamic forward (-D) to create a SOCKS proxy for multi-destination access through a single SSH path.

Quick Start

Run the local-forward script to create a local port forward to a private service.

Frequently Asked Questions about tunnel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I access a private database behind an SSH bastion using port forwarding?

Access a private database behind an SSH bastion by creating a local port forward with the SSH -L pattern. This routes your local traffic securely through the bastion to the private service, enabling direct client-side connections.

What is the difference between SSH local forward, remote forward, and dynamic forward?

SSH local forward (-L) reaches private services from your client, remote forward (-R) publishes local endpoints through the bastion, and dynamic forward (-D) creates a SOCKS proxy for multi-destination routing through a single SSH path.

Can I create a SOCKS proxy through an SSH bastion for multi-destination access?

Yes, you can create a SOCKS proxy through an SSH bastion using dynamic forwarding. The SSH -D pattern establishes a single tunnel that routes traffic to multiple private destinations, securing multi-target access.

Do I need a specific SSH client to set up secure tunnels to private services?

You need a working SSH client, specifically openssh-client, and active bastion access to establish port forwards. These prerequisites enable the secure backgrounding, keepalives, and optional bind addresses supported by the tunnel.

How do I expose a local dev server to external callbacks via an SSH bastion?

Expose a local dev server to external callbacks by initiating a remote port forward using the SSH -R pattern. This publishes your local endpoint through the reachable bastion, allowing external systems to route traffic back to your dev server.