# SSH Tunnel Builder Guide

Assemble an ssh -L, -R or -D tunnel with the right ports, identity file and keepalive options, then copy the command.

- Tool: https://ilham.dev/tools/ssh-tunnel-builder/
- Guide URL: https://ilham.dev/guides/ssh-tunnel-builder/
- Tool guides index: https://ilham.dev/guides/tools/
- Broader guide: Network Debugging Notes (https://ilham.dev/guides/network-debugging/)

## What it does

Write an ssh tunnel without memorising the -L, -R and -D shapes. Pick the direction, fill in the ports, and the page assembles the command with the keepalive and failure options most people forget. The bind address is optional, and -D hides the destination fields because a SOCKS proxy has none.

## Use the tool

Open https://ilham.dev/tools/ssh-tunnel-builder/, add the input the tool asks for, run it, and check the output before using it elsewhere.

## Input and output

- Input: text.
- Output: text.
- Category: Network.

## Privacy and processing
Processing happens locally in your browser. This tool does not upload the input to ilham.dev.

## Questions

### What is the difference between -L, -R and -D?

A local forward (-L) makes a service on the far side reachable from a port on this machine. A remote forward (-R) does the opposite: it publishes a service on this machine to the far side. A dynamic forward (-D) opens a SOCKS proxy you can point a browser at.

### Why are -f and -N on by default?

Together they put the tunnel in the background and run no remote command, which is what you usually want for a tunnel that only forwards ports. Turn them off if you also want a shell on the host.

### Does this connect for me?

No. It only writes the command; you copy it and run it in your own terminal, so no key or password ever touches the page.