Access through an SSH tunnel

An SSH tunnel securely forwards the remote host's local Gateway port to your computer. It is the universal fallback when you already have SSH access to the host.

Open the tunnel

Run on your local computer:

ssh -N -L 18790:127.0.0.1:18790 user@gateway-host

Or use:

xopc gateway ssh-tunnel --target user@gateway-host

Keep that terminal running, open http://127.0.0.1:18790 locally, and use the remote Gateway's token.

Safety

• Keep the remote Gateway bound to loopback.
• Use SSH keys and protect the private key.
• Do not also expose the remote Gateway port for convenience.
• Close the tunnel and remove saved tokens on a shared computer.

Troubleshooting

• SSH fails: verify ssh user@gateway-host by itself first.
• Local port is occupied: use another local port, for example 18791:127.0.0.1:18790.
• Unauthorized: use the remote Gateway's token, not a local instance's token.
• Page does not load: run xopc gateway health on the remote host.

See Remote access for other methods.