====== SSH Tunneling ======

{{:qortal_official_logo_transparent_.png?400|}}

Users can use a remote node on their network or outside of their network by creating an SSH tunnel into that system. Below is how to do this from a Linux system but you can also do the same from a PowerShell on Windows or from the Terminal on MacOS.

If the system you run your node on uses a software firewall like UFW, you'll need to enable port 22 for SSH access.

For outside network connections, use the external IP address where the node is located. You will also need to open the SSH port on your firewall which is typically port 22.

Use the following Terminal command to establish the tunnel:

<code>ssh -L 12398:localhost:12391 qortal@192.168.88.11</code>


The first port number can be any port as long as it matches what you configure in the **CHOOSE CUSTOM NODE** settings, we have chosen **12398** in this example. The second port number needs to be **12391**. The username and IP address to the computer will depend on your unique setup.

Upon first connecting it will ask you if you want to trust the encrypted fingerprint. Type 'yes' and press enter.
Then proceed with the username's password.

{{::ssh_tunnel_1.png?800|}}


Once logged in, you will see the system's name and the username you logged in with in the terminal.
This is a great way to also manage a remote node from the command line. You need to keep this terminal window open to keep the tunnel active.

{{::ssh_tunnel_2.png?800|}}


Now you need to open up Qortal Hub and configure the **CHOOSE CUSTOM NODE** settings.

{{::screenshot_from_2026-03-12_18-55-15.png?400|}}

Once inside the **CHOOSE CUSTOM NODE** settings, click **ADD**

{{::new_custom_node.png?600|}}

Then add the localhost node IP address with the port number as shown. The port number needs to match the first port number you tunneled into your node with.
Add the **API Key** which is found in your **~/qortal** directory in a text file called **apikey.txt**
On Windows, the **API Key** file is found in **C:\Program Files\Qortal**
When the information is entered, click **SAVE**.

{{::tunneled_custom_node_configuration.png?500|}}


Your chosen node will have the **CHOOSE** button greyed out. Then click **CLOSE**.

{{::tunneled_node_finished_configuration.png?500|}}

Now you can log in as normal with either a saved account or a new account.
Make sure your localhost IP address you configured shows up where it says 'Using node:...'

{{::tunneled_node_ready_to_log_in.png?500|}}


Upon logging in, you can mouse over the Qortal icon in the top left corner to see which node you're currently connected to.

{{::logged_in_tunneled_node.png?500|}}