Using DBeaver’s Built‑in SSH Tunnel for JDBC Connections to Private Databases
Configure DBeaver’s SSH tunnel to reach private databases through a bastion host, including key authentication, permission checks, and verification steps.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Configure DBeaver’s SSH tunnel to reach private databases through a bastion host, including key authentication, permission checks, and verification steps.
Use SSH port forwarding to reach internal services without exposing them. Local, remote and dynamic forwarding options, with a concrete database tunnel example and verification steps.
Stop exposing your database ports to the public internet. Learn how to use DBeaver's built-in SSH tunneling to securely access private databases via a bastion host.
Ngrok TCP tunneling lets you expose local SSH or database services to the internet via encrypted tunnels, but free-tier limits and firewall exposure require careful handling.
Learn to use SSH local port forwarding to securely reach internal services like private databases through an encrypted tunnel, without opening firewall ports to the internet.
Learn how to configure DBeaver’s SSH tab to create an encrypted tunnel, run queries, and avoid exposing database ports directly.
I need to pick one forwarding approach in PuTTY for a team that tunnels to internal services through a shared jump host, and the deciding constraint is avoiding accidental public access to those services. PuTTY documents both options under Connection > SSH > Tunnels: local forwarding binds a port on the client machine, while remote forwarding asks the