Network Features

Leverage advanced SSH networking capabilities

Overview

HejShell supports advanced SSH network features including port forwarding, jump hosts, and agent forwarding.

  • Local/Remote/Dynamic port forwarding
  • Jump host (bastion) connections
  • SSH agent forwarding
  • SOCKS5 proxy

Port Forwarding

Securely access remote services through SSH tunnels.

Forwarding Types

Local Port Forwarding (-L)

Connects a local port to a remote server's port.

localhost:3306 → remote:3306

Remote Port Forwarding (-R)

Connects a remote server's port to local.

remote:8080 → localhost:3000

Dynamic Port Forwarding (-D)

Creates a SOCKS5 proxy to tunnel all traffic.

localhost:1080 → SOCKS5 proxy

Setup

  1. Go to Connection Settings > Port Forwarding tab
  2. Click '+' to add a new rule
  3. Select type (Local/Remote/Dynamic)
  4. Enter source and destination host:port
  5. Save and connect

Jump Host

Access servers in internal networks through a bastion server.

How It Works

Connect to the final destination server via a jump host (bastion).

Connection flow:

Your PC → Jump Host → Final Server

Setup

  1. First, save the jump host connection info
  2. Enable 'Jump Host' option when setting up the final server
  3. Select the saved jump host
  4. Connection will automatically route through the jump host

💡 Multiple Jump Hosts

If you need to go through multiple jump hosts sequentially, you can set up a jump host chain.

SSH Agent Forwarding

Forward your local SSH keys to use them on remote servers.

How to Enable

  1. Go to Connection Settings > Advanced Options
  2. Check 'Enable Agent Forwarding'
  3. SSH keys are now available on the remote server after connecting

⚠️ Security Note

Agent forwarding is convenient but should not be used on untrusted servers. A malicious server admin could exploit the forwarded agent.

SOCKS5 Dynamic Port Forwarding

Create a SOCKS5 proxy through dynamic port forwarding to tunnel all network traffic through the SSH connection.

Use Cases

  • Access internal network websites
  • Bypass geo-restrictions
  • Secure browsing on public Wi-Fi
  • Test internal APIs

Setup

  1. Add dynamic forwarding in Connection Settings > Port Forwarding
  2. Specify local port (e.g., 1080)
  3. Set up SOCKS5 proxy in browser or app after connecting
  4. Proxy: localhost:1080

Feature Request

Have suggestions for network features? Feel free to contact us. dev@hej.ai.kr

Hej Shell | Hej Shell