Feature Request: TCP/SSH Tunnels #1704

New Issue

MrUnknownDE · 2026-04-05T19:40:04+02:00

MrUnknownDE commented

2026-04-05 19:40:04 +02:00

Originally created by @LeonvanHeerden on 3/16/2025

I need to use the TCP tunnel facility for a lot of sites.

I am trying to setup a facility like a Jump server to use a SSH connections to sites and then once the SSH connection is up, use a tunnel to access additional services on the other side of that connection.

Currently this is only possible with a NEWT connection, but a lot of the sites I would like to connect to, doesn't allow 3rd party software installed.

Currently to get this done through Newt, each port has to be configured in Docker Compose to allow the port to be exposed externally and pass the Traeffic into the container. And the port has to be configured in the Traefic config to allowed the port to be opened and accept the incoming traffic.
This also requires a restart if changes are made.

A facility to manage SSH connection would be useful.

If I can add a SITE as a SSH connection and add tunnels to it.
Then add resources with the Site and the tunnel Ports.

The SSH server on the Pangolin container would then make the connection only when the resource is accessed.
This should not require that the ports are opened on the Container, but it might still require the Traefic config.

*Originally created by @LeonvanHeerden on 3/16/2025* I need to use the TCP tunnel facility for a lot of sites. I am trying to setup a facility like a Jump server to use a SSH connections to sites and then once the SSH connection is up, use a tunnel to access additional services on the other side of that connection. Currently this is only possible with a NEWT connection, but a lot of the sites I would like to connect to, doesn't allow 3rd party software installed. Currently to get this done through Newt, each port has to be configured in Docker Compose to allow the port to be exposed externally and pass the Traeffic into the container. And the port has to be configured in the Traefic config to allowed the port to be opened and accept the incoming traffic. This also requires a restart if changes are made. A facility to manage SSH connection would be useful. If I can add a SITE as a SSH connection and add tunnels to it. Then add resources with the Site and the tunnel Ports. The SSH server on the Pangolin container would then make the connection only when the resource is accessed. This should not require that the ports are opened on the Container, but it might still require the Traefic config.

MrUnknownDE closed this issue

2026-04-05 19:40:04 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1704