Проброс порта через SSH туннель

ssh -g -L 8001:localhost:8000 -f -N root@123.123.123.123

Где,

-g - Allows remote hosts to connect to local forwarded ports. If used on a multiplexed connection, then this option must be specified on the master process.
-L port:host:hostport - Specifies that connections to the given TCP port or Unix socket on the local (client) host are to be forwarded to the given host and port, or Unix socket, on the remote side.
-f - Requests ssh to go to background just before command execution.
-N - Do not execute a remote command. This is useful for just forwarding ports.

#todo