Port Forwarding
SOCKS5 Proxy
Route application traffic through an SSH server using a dynamic SOCKS5 proxy.
A SOCKS5 tunnel creates a dynamic proxy on your local machine. Instead of forwarding a single port, any application configured to use the SOCKS5 proxy can route all its traffic through the SSH server.
Common use cases
- Browse the web as if you are on the remote server's network
- Route CLI tools (
curl,git) through a specific network region - Access internal services without setting up individual local forwards
Adding a SOCKS5 tunnel
- Go to Connections → Port Forwarding.
- Click New Tunnel → SOCKS5.
- Fill in:
| Field | Example | Description |
|---|---|---|
| Connection | prod-server | The SSH host to use as the proxy exit |
| Local port | 1080 | Local port to listen on (SOCKS5) |
| Label | Prod proxy | Friendly name |
- Save, then toggle the tunnel Active.
Configuring applications
Point your application's SOCKS5 proxy setting to 127.0.0.1:<local port>.
curl example:
curl --socks5 127.0.0.1:1080 https://example.comBrowser (Firefox):
Settings → Network Settings → Manual proxy → SOCKS Host: 127.0.0.1, Port: 1080, SOCKS v5.
Stopping the proxy
Toggle the Active switch off. The local SOCKS5 listener is closed immediately.