SSH Port Forwarding — Three Data Flows

Speed:

Ready — Click play to start the demo

One encrypted SSH tunnel, three modes. -L / -R / -D differ only in who listens and who makes the outbound connection. Watch the packets.

-L 本地转发ssh -L 8080:db.internal:3306 user@jumppacket path ↓

🌐

Browser

localhost:8080

→

💻

SSH Client

ssh -L

🔒

SSH 加密隧道

ch0 · AES

🖥

SSH Server

jump.example.com

→

解密后

🗄

db.internal

:3306

SSH Client 在本机监听 8080，把 TCP 流量加密塞进隧道；SSH Server 解密后替你去连 db.internal:3306。