Port forwarding
Mobile SSH dey support local SSH port forwarding for both Android and iOS. One local port for di device go dey listen on 127.0.0.1 and go dey forward traffic through di SSH connection go reach remote host and port.
Syntax for saved tunnel
Port-forwarding rules dey comma-separated. Each entry dey use one of two forms:
PORT
LOCAL:REMOTEHOST:REMOTE
Short form:
8080
Dis one go bind 127.0.0.1:8080 on di device and forward am go localhost:8080 from di server side.
Full form:
3000:localhost:3000
Dis one go bind 127.0.0.1:3000 on di device and forward am through SSH go localhost:3000 on di remote side.
Multiple forwards:
8080, 3000:localhost:3000, 15432:db.internal:5432
Add tunnel to saved server
- Open Saved Servers.
- Add or edit one server profile.
- Enter di forwarding rules for di Port forwards field.
- Save di server.
- Connect to di server.
Di app go apply di saved forwards after di SSH session don connect.
Tunnels na di server profile own
You dey declare forwards for di saved server, and dem dey come up wen dat server connect. No separate screen dey for adding or removing tunnel for middle of session for any of di two platforms: to change your forwards, edit di server profile and reconnect.
Na deliberate trade — tunnel wey dey live inside di profile dey come back every time you connect, including after reconnect on new network, witout you rebuilding am by hand.
IPv6 destination
You must bracket IPv6 destination so di colons no go confuse wit di port separator:
8080:[2001:db8::1]:80
Bare IPv6 address wey no get bracket dem dey reject am as ambiguous instead of reading am wrong quietly. Di same bracket form dey work for server address field, wit optional port after am ([fe80::1]:22).
Address binding
Mobile SSH dey bind local forwards to 127.0.0.1 on di device. E be so on purpose: e dey keep di tunnel local to di device and e dey avoid IPv6-only loopback wahala. Other apps on di same device fit connect to di forwarded local port if di operating system allow dia network access.
Common examples
To access web service wey dey run on di remote server:
8080
Then open http://127.0.0.1:8080 from any browser on di same device.
To access development server:
3000:localhost:3000
To access internal database wey you fit reach from di SSH server:
15432:db.internal:5432
Troubleshooting tunnels
- Make sure di SSH session don connect — di forwards dey come up after di session don come up.
- Check say di local port no dey already in use.
- Check say di remote host and port dey reachable from di SSH server.
- Use
localhostwen di destination service dey on di SSH server itself. - Use di server internal DNS name or IP wen you dey forward to anoda host wey dey behind di SSH server.