Home Explore Blog CI



man-pages

2nd chunk of `ssh.man`
0b10f586e8a5d4d7c2cdfd1dd198cd822cff7a59c6b282540000000100000fea
    Use  bind_address  on the local machine as the source address of
               the connection.  Only useful on systems with more than  one  ad‐
               dress.

       -C      Requests  compression  of  all  data  (including  stdin, stdout,
               stderr, and data for forwarded X11, TCP and Unix‐domain  connec‐
               tions).   The compression algorithm is the same used by gzip(1).
               Compression is desirable on modem lines and other  slow  connec‐
               tions, but will only slow down things on fast networks.  The de‐
               fault value can be set on a host‐by‐host basis in the configura‐
               tion files; see the Compression option in ssh_config(5).

       -c cipher_spec
               Selects  the  cipher  specification  for encrypting the session.
               cipher_spec is a comma‐separated list of ciphers listed in order
               of preference.  See the Ciphers  keyword  in  ssh_config(5)  for
               more information.

       -D [bind_address:]port
               Specifies  a  local “dynamic” application‐level port forwarding.
               This works by allocating a socket to listen to port on the local
               side, optionally bound to the specified bind_address.   Whenever
               a  connection  is made to this port, the connection is forwarded
               over the secure channel, and the application  protocol  is  then
               used  to  determine where to connect to from the remote machine.
               Currently the SOCKS4 and SOCKS5 protocols are supported, and ssh
               will act as a SOCKS server.  Only root  can  forward  privileged
               ports.   Dynamic  port  forwardings can also be specified in the
               configuration file.

               IPv6 addresses can be specified  by  enclosing  the  address  in
               square  brackets.   Only  the  superuser  can forward privileged
               ports.  By default, the local port is bound in  accordance  with
               the GatewayPorts setting.  However, an explicit bind_address may
               be  used  to  bind  the  connection  to a specific address.  The
               bind_address of “localhost” indicates that the listening port be
               bound for local use only, while an empty address  or  ‘*’  indi‐
               cates that the port should be available from all interfaces.

       -E log_file
               Append debug logs to log_file instead of standard error.

       -e escape_char
               Sets  the  escape  character  for  sessions with a pty (default:
               ‘~’).  The escape character is only recognized at the  beginning
               of  a line.  The escape character followed by a dot (‘.’) closes
               the connection; followed by control‐Z suspends  the  connection;
               and followed by itself sends the escape character once.  Setting
               the  character to “none” disables any escapes and makes the ses‐
               sion fully transparent.

       -F configfile
               Specifies an alternative per‐user configuration file.  If a con‐
               figuration file is given on the command  line,  the  system‐wide
               configuration  file  (/etc/ssh/ssh_config) will be ignored.  The
               default for the per‐user configuration  file  is  ~/.ssh/config.
               If set to “none”, no configuration files will be read.

       -f      Requests  ssh to go to background just before command execution.
               This is  useful  if  ssh  is  going  to  ask  for  passwords  or
               passphrases,  but the user wants it in the background.  This im‐
               plies -n.  The recommended way to start X11 programs at a remote
               site is with something like ssh ‐f host xterm.

               If the  ExitOnForwardFailure  configuration  option  is  set  to
               “yes”,  then  a  client started with

Title: SSH Options: Binding Addresses, Compression, Cipher Specification, and Dynamic Port Forwarding
Summary
This section of the SSH manual describes several command-line options. It covers binding the source address of the connection, requesting data compression using the gzip algorithm, selecting the cipher specification for encrypting the session, specifying local dynamic application-level port forwarding (acting as a SOCKS server), appending debug logs to a file, setting an escape character for sessions with a pty, specifying an alternative per-user configuration file, and requesting ssh to go to the background before command execution.