Every tunnel needs named ends.
MobaXterm supports SSH gateways for several session types and provides a graphical tunnel manager. We turn the diagram into an owned route with explicit local, gateway, and destination endpoints.
Home / Gateways
Forwarding is a direction, not a label.
| Pattern | Question to answer | Typical test |
|---|---|---|
| Gateway / jump host | Which boundary must be crossed first? | Destination reachable only through approved gateway |
| Local forwarding | What local listener reaches which remote service? | Local endpoint resolves to intended destination |
| Remote forwarding | Who is allowed to expose the reverse path? | Explicitly authorized remote listener |
| Dynamic forwarding | Which applications may use the proxy route? | Scoped client behavior and teardown |
- Source
- Workstation, local interface, client, and initiating user.
- Gateway
- Host owner, authentication, logging, lifetime, and support contact.
- Destination
- Resolved host, service port, environment, and data sensitivity context.
- Stop condition
- How to close the route, confirm teardown, and escalate unexpected reachability.
Review sequence
Draw endpoints
No unnamed arrows.
Confirm owners
Each boundary has an accountable team.
Exercise
Test connect, failure, reconnect, and teardown.
Record
Publish purpose and expiry assumptions.