I run an Ubuntu Desktop VM on my Proxmox server and wanted to RDP into it without exposing port 3389 to my whole network. What i ended up with: tunnel RDP through SSH.

The Idea

I already trust my SSH connection to the Proxmox host. So instead of opening RDP up directly, I have SSH secretly carry the RDP traffic for me:

[Laptop] --localhost:3389--> [SSH tunnel] --> [Proxmox host] --3389--> [VM]

Enter fullscreen mode