Create a SOCKS proxy to tunnel your web traffic (like when you’re traveling)
ssh -D
Set your web browser to use localhost: as the proxy.
Connect to a Windows RDP host behind a bastion server
ssh -L ::3389
Set your RDP client to connect to localhost:
Connect to your remote machine’s VNC server without opening the VNC port
ssh -L 5901:localhost:5901
Set your VNC client to to connect to localhost:5901
You can follow this pattern with other ports you don’t want to open to the world:
LDAP (389), 631 (CUPS), 8080 (alternate HTTP), and so on.
Generate a new SSH key pair
ssh-keygen
Update the passphrase on an existing SSH key-pair
ssh-keygen -p
Copy a public SSH key to a remote host
ssh-copy-id -i
SSH has a lot of command-line options, but if you use the same options for a host
regularly, you can put an entry in the SSH configuration file (${HOME}/.ssh/config)
instead. For example:
host myhouse
User itsme
HostName house.example.com
Then you can type ssh myhouse instead of ssh itsme@house.example.com.