sshuttle

Tunnel all traffic

$ sshuttle -r [user@host] 0/0

$ sshuttle -r [user@host] [192.168.0.0/24]

$ sshuttle -r [user@host] [10.0.0.0/8] [172.16.0.0/12]

$ sshuttle -r [user@host] 0/0 -x [192.168.1.0/24]

$ sshuttle --dns -r [user@host] 0/0

$ sshuttle -r [user@host] --auto-nets

$ sshuttle -v -r [user@host] [10.0.0.0/8]

sshuttle [-r server] [--dns] [-x exclude] [options] subnets

sshuttle creates a VPN-like tunnel over SSH. It transparently redirects traffic through a remote server without configuring VPN software.
Unlike VPNs, sshuttle requires only SSH access. No server-side installation is needed beyond Python. It works where VPN ports are blocked.
Subnet specifications determine what traffic is tunneled. 0/0 tunnels everything. Specific subnets route only matching traffic.
DNS tunneling prevents leaks. Remote DNS resolution hides query patterns from local networks.
The tool uses iptables/pf to redirect traffic. Root access is needed locally for routing setup. The remote needs only SSH access.
Auto-nets reads the remote routing table to tunnel all its accessible networks.

-r SERVER

Remote server (user@host).

Tunnel DNS queries.

Exclude subnet.

Listen address.

Auto-detect server networks.

Scan for hosts.

Auto-detect DNS server.

SSH command.

Verbose.

Run as daemon.

PID file.

NAT method (auto, nat, tproxy).

Requires root locally. Not a full VPN (no UDP by default). Latency added by SSH. Some applications may not work through tunnel.

sshuttle was created by Avery Pennarun around 2010. It was described as a "poor man's VPN" that works wherever SSH works.

ssh(1), openvpn(8), wireguard(8), proxychains(1)