How can I expose a Docker container port only to localhost so that it ...

... SSH tunnel will allow using only the gateway's localhost as the remote address. In other words, your local port will become accessible only ...

Allows remote hosts to connect to local forwarded ports. If used on a multiplexed connection, then this option must be specified on the master process.

The right syntax for create an SSH tunnel is this one: ssh -L local_port:remote_address:remote_port [email protected]

Just make the target of your ssh tunnel localhost or 127.0.0.1 . ssh -L local-port:127.0.0.1:container-port docker-host.

I want to connect to remote MySQL via ssh tunnel with user that has 'localhost' access. I use this to make a tunnel: ssh -f -N -L 33306:localhost:3306 user@ ...

It seems as if the remote side binds only on localhost , instead of to all interfaces; It works when opening the port on localhost on the ...

The problem is only the remote server, via 127.0.0.1:8080 can access the server behind the ssh tunnel, whereas I want it to listen on 1.2.3.4:8080.

With just a port specification, it's only listening on localhost. You'll have to use 0.0.0.0:22222 to have it listen on all ports, but then ...

Turns out that -listen is what I need. By listening to the device with addr localhost it listens only to the loopback device.

Basically, the SSH client listens for connections on a configured port, and when it receives a connection, it tunnels the connection to an SSH server.