SSH Tunnel Builder Guide
Assemble an ssh -L, -R or -D tunnel with the right ports, identity file and keepalive options, then copy the command.
A short companion for SSH Tunnel Builder: when it is useful, what it expects, and what to check before using the result.
What it does
Write an ssh tunnel without memorising the -L, -R and -D shapes. Pick the direction, fill in the ports, and the page assembles the command with the keepalive and failure options most people forget. The bind address is optional, and -D hides the destination fields because a SOCKS proxy has none.
Use the tool
Open SSH Tunnel Builder, add the input the tool asks for, run it, and check the output before using it elsewhere.
Input and output
- Input: text.
- Output: text.
- Category: Network.
Privacy and processing
Processing happens locally in your browser. This tool does not upload the input to ilham.dev.
Questions
What is the difference between -L, -R and -D?
A local forward (-L) makes a service on the far side reachable from a port on this machine. A remote forward (-R) does the opposite: it publishes a service on this machine to the far side. A dynamic forward (-D) opens a SOCKS proxy you can point a browser at.
Why are -f and -N on by default?
Together they put the tunnel in the background and run no remote command, which is what you usually want for a tunnel that only forwards ports. Turn them off if you also want a shell on the host.
Does this connect for me?
No. It only writes the command; you copy it and run it in your own terminal, so no key or password ever touches the page.
Related guide
For broader background, see Network Debugging Notes.