Service Tunneling

You can expose a service, running behind your jump server, by connecting your ssh with the additional -L flag.

 ssh -L localport:server-ip:server-port username@tailscale-support-vm-ip

Example

I want to access Netbox directly on my local machine in my browser.

I'll expose port 9000 on my machine. The ip of the netbox server is 10.10.2.196 and the netbox service is listening on port 8000 on the netbox server. My OCS jump server has an tailscale IP address of 100.200.100.200

ssh -L 9000:10.10.2.196:8000 richard@<100.200.100.200

Now I can open my browser and in the URL, type http://localhost:9000 and I will see whatever is be served on http://10.10.2.196:8000 within the OCS network.