Ssh-tunnelonly

SSH不只是拿來做遠端登入的工具，透過SSHTunnel能解鎖許多意想不到的應用情境。其中最常見的做法是運用「本地轉發（LocalForwarding）」或「遠端轉發（RemoteForwarding）」來突破網路限制，就好比開啟一扇隱藏的傳送門，把原本無法直連的服務重新串接起來。,SSHTunnel可以分為以下幾種:*LocalTunnel(LocalForwarding)*RemoteTunnel(RemoteForwarding)*DynamicTunnel(DynamicForwarding)##LocalTunnelLocalTunnel會從Client端...

參考資訊如下
「應用」SSH 的特殊用法，突破限制的傳送門 – SSH Tunnel

SSH 不只是拿來做遠端登入的工具，透過 SSH Tunnel 能解鎖許多意想不到的應用情境。 其中最常見的做法是運用「本地轉發（Local Forwarding）」或「遠端轉發（Remote Forwarding）」來突破網路限制，就好比開啟一扇隱藏的傳送門，把原本無法直連的服務重新串接起來。

Linux (九) - SSH Tunnel 突破防火牆限制

SSH Tunnel 可以分為以下幾種 : * Local Tunnel (Local Forwarding) * Remote Tunnel (Remote Forwarding) * Dynamic Tunnel (Dynamic Forwarding) ## Local Tunnel Local Tunnel 會從 Client 端將特定服務的流量透過 SSH 傳送給 Server 端 (Remote)，再透過 Server 端將流量導向到 `特定` 的 Host 上的 Port。

set up a ssh tunnel only user for ssh proxy jump · GitHub

In order to give someone access to hosts that are available only by ssh "bouncing" (ProxyJump), add a user for this specific purpose. We have an internal openstack where instances get IPs on per-tenant networks.

How to restrict an SSH user to only allow SSH

You can control what people can do in ssh by matching groups assuming your version of ssh is new enough to support it (openssh 5.x+). Basically, we treat them as if they were sftp users, but allow tcp forwarding and optionally specify the destinations the

Allow user to set up an SSH tunnel, but nothing else

By using this option, the user may only set up a tunnel to the specified host and port. For the details of the AUTHORIZED_KEYS file format refer to man sshd. You'll need to also specify "no-pty" as part of the option set.

SSH tunneling explained

Learn about SSH tunneling: how it securely routes network traffic through connections, the three types of tunnels and a step-by-step setup tutorial.