Connecting · 3 of 7

Jump hosts and port forwards

A server that is only reachable through another one connects in a single step, and ports travel through the SSH connection.

Jump hosts

Under Advanced in the host form, any saved host can be the jump host (bastion). Databases and RDP hosts have Tunnel through SSH host for the same purpose.

Port forwards

Defined per SSH host under Advanced → Port forwards; the Local / Remote / SOCKS switch picks the kind:

Local: a port on this Mac reaches host:port through the server (ssh -L).
Remote: a port on the server reaches host:port on this Mac (ssh -R).
SOCKS: a SOCKS5 proxy on this Mac (ssh -D); a browser or curl --socks5-hostname 127.0.0.1:1080 uses it.

Forwards start when the host connects and stop when it disconnects. The Port forwards panel in the rail lists them all, and Add a forward there opens any SSH host's form at its forwards. They travel with "Export hosts to SSH config" (LocalForward, RemoteForward, DynamicForward) and are read back on import. Kubernetes forwards (in the cluster view) are always local.