Enter the SSH port as seen from outside the network into the SSH tunnel port parameter.

Enter the external name of the bastion host as seen from the outside of the network (or wherever you are) into the SSH tunnel host parameter.

Enter the data warehouse port as seen from inside the network into the Port parameter.

Enter the hostname for the data warehouse as it is seen from inside the network in the Host parameter.

Answer yes to the “Use an SSH-tunnel for database connections” parameter.

Using the SSH tunneling feature, Metabase can automate this process.

Bastion hosts offer the option to first connect to a computer on the edge of the protected network, then, from that bastion host computer, establish a second connection to the data warehouse within the internal network, essentially patching these two connections together. Sometimes when a data warehouse is inside an enterprise environment, direct connections are blocked by security devices such as firewalls and intrusion prevention systems. When a direct connection is forbidden due to a security policy.When a direct connection is impossible.In general, there are two basic use cases for an SSH tunnel: This makes connecting to some data warehouses possible in situations that would otherwise prevent the use of Metabase.

Metabase can connect to some databases by first establishing a connection to a server in between Metabase and a data warehouse, then connecting to the data warehouse using that connection as a bridge.

Ssh tunnel bastion