SSH tunnels

SSH tunnels protect data you transmit over the internet and import into the application. Exposing an SSH tunnel as the only gateway to your network is more secure than leaving your databases and ports open to the internet. SSH tunnels use SFTP (SSH File Transfer Protocol).

Set up SSH tunnel integration

SSH tunnel integration requires one of the following database integrations:

MSSQL
MySQL
PostgreSQL

Once your project has one of these integrations, follow these steps:

Go to Data & Assets > Integrations.
Edit the existing database integration.
Scroll to the SSH tunnel section and select the checkbox.
Select an existing SSH tunnel and save the integration.

Your database integration now uses an SSH tunnel to communicate with the application.

For technical setup details, see Databases and secure connections.

Related security options

SSH tunnels and static IP allowlisting are complementary, not mutually exclusive. An SSH tunnel encrypts the data in transit; IP allowlisting restricts which sources can initiate connections to your server. You can use both together for layered security.

For an overview of all available connection security options, see Integration protection and Outbound IP addresses.