Built-in SSH tunnel vs OS-level port forwarding for bastion access without persisting production credentials
Goal is to test an integration to a remote database behind a bastion host without exposing production ports and without storing production credentials in DBeaver connection settings. Testing should use non-production credentials only. DBeaver offers a built-in SSH tunnel configured in the connection editor that is created and closed with the database connect