Chemical Markup support for Wikimedia Commons/Internship Report/Port forwarding through SSH

Consider you have a Web-Server running on an instance of a WMF-Labs project. That server serves Web pages to port 80 but you do not want to expose the config interface served on port 9090.

First, set up the proxy tunnel through bastion (replace  with your user name): vim ~/.ssh/config Host bastion1.eqiad.wmflabs Hostname bastion.wmflabs.org ProxyCommand none

Host bastion2.eqiad.wmflabs Hostname bastion2.wmflabs.org ProxyCommand none

Host bastion3.eqiad.wmflabs Hostname bastion3.wmflabs.org ProxyCommand none

Host *.eqiad.wmflabs ProxyCommand ssh -a -W %h:%p bastion1.eqiad.wmflabs

Host *.wmflabs User rillke

Then, simply tunnel the port ssh -N mediahandler-tests-static.eqiad.wmflabs -L 8080:localhost:9090
 * — instance name
 * — local port
 * — remote port, the server administration interface is listening to

Then simply go to http://localhost:8080/

Troubleshooting
Make sure
 * that on your local machine nothing is listening already to port 8080
 * that the administration interface is really running