SSH tunnel (inbound, preferred)

When connecting to a database server, allows you to optionally configure an SSH tunnel to connect through. This solution requires some setup on the part of the network administrator, but is more secure than a direct connection.

This is the preferred method for connecting database servers to It is easy, flexible and secure. No additional hardware is required beyond a bastion server. Many organizations have these deployed as a normal part of their infrastructure.

For additional security, provides user specific SSH public keys which should be configured on the bastion server (in .authorized_keys) to ensure traffic is from