SSH tunnels

Reach private databases and clusters through a single-hop SSH tunnel using a private key, password or SSH agent, with verified host keys.

  • Connect through an SSH tunnel

    Reach private MySQL, Redis, MongoDB, Kafka, ClickHouse and Kubernetes endpoints through a bastion with DevOpsPad's built-in single-hop SSH tunnel.

  • SSH private key authentication

    Use an SSH private key, including passphrase-protected keys, for DevOpsPad SSH tunnels. Supported paths, where the passphrase is stored, and common errors.

  • SSH password authentication

    Authenticate a DevOpsPad SSH tunnel with a password. Where the SSH password is stored, how to change it, and what to check when the server rejects it.

  • Use the SSH Agent for tunnels

    Authenticate DevOpsPad SSH tunnels through the agent at SSH_AUTH_SOCK so keys stay in the agent. macOS setup, and why the agent may be missing.

  • Verify SSH host keys

    DevOpsPad only trusts SSH servers listed in known_hosts or matching a SHA256 fingerprint you provide. How to set up each option and fix verification errors.

  • Troubleshoot SSH tunnel errors

    Fix DevOpsPad SSH tunnel errors - unreachable bastions, failed authentication, forwarding, Kafka advertised listeners, TLS names and unsupported setups.