Use bind_address on the local machine as the source address of
the connection. Only useful on systems with more than one ad‐
dress.
-C Requests compression of all data (including stdin, stdout,
stderr, and data for forwarded X11, TCP and Unix‐domain connec‐
tions). The compression algorithm is the same used by gzip(1).
Compression is desirable on modem lines and other slow connec‐
tions, but will only slow down things on fast networks. The de‐
fault value can be set on a host‐by‐host basis in the configura‐
tion files; see the Compression option in ssh_config(5).
-c cipher_spec
Selects the cipher specification for encrypting the session.
cipher_spec is a comma‐separated list of ciphers listed in order
of preference. See the Ciphers keyword in ssh_config(5) for
more information.
-D [bind_address:]port
Specifies a local “dynamic” application‐level port forwarding.
This works by allocating a socket to listen to port on the local
side, optionally bound to the specified bind_address. Whenever
a connection is made to this port, the connection is forwarded
over the secure channel, and the application protocol is then
used to determine where to connect to from the remote machine.
Currently the SOCKS4 and SOCKS5 protocols are supported, and ssh
will act as a SOCKS server. Only root can forward privileged
ports. Dynamic port forwardings can also be specified in the
configuration file.
IPv6 addresses can be specified by enclosing the address in
square brackets. Only the superuser can forward privileged
ports. By default, the local port is bound in accordance with
the GatewayPorts setting. However, an explicit bind_address may
be used to bind the connection to a specific address. The
bind_address of “localhost” indicates that the listening port be
bound for local use only, while an empty address or ‘*’ indi‐
cates that the port should be available from all interfaces.
-E log_file
Append debug logs to log_file instead of standard error.
-e escape_char
Sets the escape character for sessions with a pty (default:
‘~’). The escape character is only recognized at the beginning
of a line. The escape character followed by a dot (‘.’) closes
the connection; followed by control‐Z suspends the connection;
and followed by itself sends the escape character once. Setting
the character to “none” disables any escapes and makes the ses‐
sion fully transparent.
-F configfile
Specifies an alternative per‐user configuration file. If a con‐
figuration file is given on the command line, the system‐wide
configuration file (/etc/ssh/ssh_config) will be ignored. The
default for the per‐user configuration file is ~/.ssh/config.
If set to “none”, no configuration files will be read.
-f Requests ssh to go to background just before command execution.
This is useful if ssh is going to ask for passwords or
passphrases, but the user wants it in the background. This im‐
plies -n. The recommended way to start X11 programs at a remote
site is with something like ssh ‐f host xterm.
If the ExitOnForwardFailure configuration option is set to
“yes”, then a client started with