Oracle Cloud Infrastructure Documentation

Connecting to a Dynamic Port Forwarding (SOCKS5) Session

Describes how to connect to a dynamic port forwarding (SOCKS5) session.

Before you begin, you must create a dynamic port forwarding (SOCKS5) session (also known as an SSH tunnel).

  • You must have the private key file of the SSH key pair that you used to create the session.
  • The IP address of the machine must be in the CIDR block allowlist of the bastion that hosts the session.
  • The IP address of the bastion must be permitted to access the target resource. See Allowing Network Access From the Bastion.

To dynamically connect to an Autonomous Database

  1. On the Bastions list page, select the bastion that contains the dynamic port forwarding (SOCKS5) session that you want to work with.
  2. On the details page, select Sessions, and locate the session that you want to use to connect to the intended target resource.
  3. In the Actions menu (Actions Menu) for the session, select View SSH command.
  4. To copy the command, next to SSH command, select Copy, and then select Close.
  5. Use a text editor to replace <localPort> with the local port on the machine from which you want to connect to the bastion, replace <sessionId> with the bastion session ID, and replace <bastionHost> with the domain name where the bastion is hosted.
  6. (Optional) Add the verbose (-v) option to the SSH command for detailed information about the connection.
    Note

    Don't use the -vv or -vvv options.
  7. Use a command line to issue the customized SSH command and connect to the bastion session.

    If your private key was created with a passphrase, you are prompted to enter it twice for a Dynamic Port Forwarding (SOCKS5) session.

    After creating a connection to a Dynamic Port Forwarding (SOCKS5) session, the process will not exit. Do not close the terminal.

    If you enabled verbose output (-v), the final message after a successful connection is:

    debug1: pledge: network
  8. Open a database client such as Oracle SQL*Plus or Oracle SQL Developer, and then connect to localhost (or 127.0.0.1) and the local port you specified, <localPort>.

    Provide the name and password of an existing user on the database.

    For example:

    $ export CUSTOM_JDBC="-Doracle.net.socksProxyHost=127.0.0.1 
-Doracle.net.socksProxyPort=1080 -Doracle.net.socksRemoteDNS=true" 
$ sql -cloudconfig <wallet_path>.zip 
<ADB_admin_username>/"<ADB_admin_password>
"@<tns_alias_low>

If you run into any problems, see Troubleshooting Bastion.